0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x35}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}]}]}, {0x4fc, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xb8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x78, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x2c8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xfa}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x64, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xb8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x20}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3f}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x25}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x20}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xec, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xc3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x431}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x54, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6e}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xc0}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xa6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x33b}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x4}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x15f}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x104, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xe4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xe787}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xc000}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}]}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x4c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1c}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x80000000}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9315}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x561}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x345}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xe8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xe0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x77}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3f}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xc1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x650, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x285}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x337}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1a}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x148c}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2f}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x1fc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xb4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8b06}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x74, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xfc}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1f}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x88, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x178, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x108, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3c}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9c0}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8f}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x21}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xbf}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x54, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffff7fff}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x360}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x80000001}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3a9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x1cc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xf4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x200}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x20}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xd0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x52}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x17ad}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xc0}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xef}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x2d8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xc0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xb8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xd2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7beb}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xa4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x94, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x128, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x120, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3f}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0xc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0x1c4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x94, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x8c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x138}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xdc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xcc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0x3a0, 0x5, 0x0, 0x1, [{0x1fc, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x124, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x120, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xb1a}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xfd}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xd}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1716}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15a4}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x8c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x78, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8afa}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x78, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x38}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x20}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x365}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1000}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2a9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1f}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x128, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x4}, @NL80211_PMSR_PEER_ATTR_REQ={0x120, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xe8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0x670, 0x5, 0x0, 0x1, [{0xe0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xd0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xc8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x800a}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x504, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x148, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x74, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x401}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3ff}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfffc}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8000}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x60, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x60, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1d3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x20e}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x29}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x374, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x160, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4d}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2d}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x114, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfffa}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x101}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x88, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9b}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x5c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xca}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xecbf}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x15c}]}]}, {0x6c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xfd}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x20000}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x4}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}]}, @NL80211_PMSR_ATTR_PEERS={0xcc8, 0x5, 0x0, 0x1, [{0x3cc, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x3c8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xec, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xfe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xac, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3e}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xf8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3f}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x78fb}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0xbd5fa6d65812e71d}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x90, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x6c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}]}]}, {0x80, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xdac9cea3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3a}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x46}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16f8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffffffff}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x39}]}]}, {0x3ac, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x1c4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xb4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xda}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x100, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x184, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x21}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x20}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xec, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x20}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x976}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x6f}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x157c}]}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x4}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0x224, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x54, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1e}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1a}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2af}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16e9}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x6c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x1b4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x64, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xffff}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xec, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3ff}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x800}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa3}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xc87}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x200}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x20, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x1f8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xca}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2af}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x16}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x311}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xf0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xa8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xb7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xffff}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfff8}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x200}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}]}]}]}]}, 0x4360}, 0x1, 0x0, 0x0, 0x40}, 0x48094) 19:58:07 executing program 4: unshare(0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0xfffffffffffffdc1, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000080601010000000000040005000100070000000000000000b8b655138f1cfd91997b0c09320324162bd4d92871443ec21a422c6c7772aa93fee438d57ff239f5cd94f1ba5451a8c2ccf041437485f2abfbc1f05f895e7919fe11409e06fb2d8f0e13184e660b1e1293c078865b1a60ae0d5eb5334ff6e0e85e82873a484b5cec4ea11e78928d7c47b705b6ea1d0c44d4fe8516e99163fb49de9a4ab5d2cb8b4bba967223bd42098c5466a6cdc953f92325bd84b323fe8cba5aef309974248cb1242706d4971c32e5322545b692ac3c67f0805f23c4b3b1f36a0900000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f0000000040)={0x0, 0x8, "049c234a905a2719838756bc17846293dc739ffa9622966b9d666696ea161420", 0x80, 0x3, 0xffffffff, 0xdf, 0x209}) 19:58:07 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x8, 0x7, 0x5}) 19:58:07 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0) r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000080)={r1}, &(0x7f00000000c0)=0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) close(r2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) dup(r3) r4 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r2, r4, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) [ 709.283918][T22267] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 709.306260][ T35] audit: type=1800 audit(1608580687.668:42): pid=22266 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15765 res=0 errno=0 [ 709.345115][T22272] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 709.406344][ T35] audit: type=1800 audit(1608580687.718:43): pid=22266 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15765 res=0 errno=0 19:58:07 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0) r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000080)={r1}, &(0x7f00000000c0)=0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) close(r2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r3, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r4 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r2, r4, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) [ 709.566247][ T35] audit: type=1800 audit(1608580687.928:44): pid=22279 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15765 res=0 errno=0 19:58:08 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x8010671f, &(0x7f0000000040)={0x1}) 19:58:08 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x300, 0x7, 0x5}) 19:58:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600)='nl80211\x00') sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001dc0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x2}}}}}, 0x30}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000000)={0x80, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x5f, 0x33, @beacon={@with_ht={{{}, {}, @device_b, @device_b}}, 0x0, @random, 0x0, @val, @void, @void, @val={0x4, 0x6}, @void, @void, @val={0x25, 0x3}, @void, @void, @val={0x2d, 0x1a}, @void, @void, @val={0x76, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x80}}, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x4c, r1, 0x8, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4048000}, 0x200000c1) unshare(0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000080605020000000000000000000000000500010007000000"], 0x1c}}, 0x0) 19:58:08 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) r0 = socket(0x10, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x4600, &(0x7f0000000040)={0x0, 0x3, 0x2}) 19:58:08 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0) r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000080)={r1}, &(0x7f00000000c0)=0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) close(r2) write$sndseq(0xffffffffffffffff, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r3 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r2, r3, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 19:58:08 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x81f8943c, &(0x7f0000000040)={0x1}) [ 710.491362][ T35] kauditd_printk_skb: 1 callbacks suppressed [ 710.491381][ T35] audit: type=1800 audit(1608580688.848:46): pid=22298 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15765 res=0 errno=0 19:58:08 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0) r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000080)={r1}, &(0x7f00000000c0)=0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) close(r2) write$sndseq(0xffffffffffffffff, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r3 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r2, r3, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 19:58:08 executing program 4: unshare(0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r1 = signalfd(r0, &(0x7f0000000000)={[0xa6]}, 0x8) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f00000000c0)={{0x5, 0x1}, {0x2}, 0x0, 0x4, 0x5}) 19:58:09 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x500, 0x7, 0x5}) 19:58:09 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kexec_load(0x3, 0x3, &(0x7f0000000400)=[{&(0x7f0000000140)="c0772e9e2dede7f0f43d7c756f5458d25dcd47f517d3e1ea1a1bce9ecb05563816bffcb08f483fc283c5809aa27a23011618a9ea8f18df1d5089c9e28d1c2e7e10d8db7564d98f49defcf1935c364f5b3c62cfe5bd92712d82106e355c8b13cfea5417b25cfc20d02dd58798c23604d65a66a9b16e093ff6da9842f66f1f46e36b7824fec975a3d47597cf07cb1da713ad6203c1ddfd3e1a50ad496629250a3e9c3bdc2a530855596820c3841a6c9b8b87178557e48a87054ec79553184976fc33dd12840ab80b6ea845abd05da1959b08eefaaf660578ccb9ff98d42aa9a3a0756864cab1fc4212b94ceae18020971753375e", 0xf3, 0x7c2d, 0xfffffffffffffff7}, {&(0x7f0000000240)="fcbf90c8c4706063c6da0b7bb3125e39affc6397dcd9a74c101ce53d35909b313196038f98f91295e38a3be730a706a557d1682f487bc334926e8685c0841ce334d24b0f108198fbd268b84f8af229a339e712e59c8d14a74199e7fa7ea6d63adc32e217883da5184837cd4c3dadc098ff0e895d3a4eae65f776d581cf14ba8bc108cc7f2542f54e0792fc2ae57838794e632af6214742075e65ee148ebd9bdd07d2a4790f2e7b949b183e2ebfaefa751612e97d5f29dd8109ad15d0b8a3239882010ee8f79315c1c8abfc98663c102bbb89e110513092bcecfa9c231ac469af", 0xe0, 0x0, 0x1f}, {&(0x7f0000000340)="2ab2abf157fa9d5281abb60b0dbc5a32a38ec6d7ad375d96f820f722a440091afdbcde6234f2288d625b215af870239d98648f1f051d051ced93c61da1ab3f9812310983c0c7b88b30bd3c22a24fc298f2e7050c771cecf2cfce8e33779d7c0bf9100a903548fae8deae92a3b0ceac100220c8d126cf02d9da098a1796f2ba584ceecc52af13cc32a40c43e34e8d0562fca97128474e4be0ffce4907729ad697e7", 0xa1, 0x2, 0x200}], 0x2) write$sysctl(0xffffffffffffffff, &(0x7f0000000080)='0\x00', 0x2) getpid() getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x4600, &(0x7f0000000040)={0x0, 0x7}) [ 710.851870][ T35] audit: type=1800 audit(1608580689.208:47): pid=22314 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15765 res=0 errno=0 19:58:09 executing program 4: unshare(0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x8, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x27}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}}, 0x400a800) 19:58:09 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x600, 0x7, 0x5}) 19:58:09 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') read$FUSE(r0, &(0x7f00000004c0)={0x2020}, 0xacd) read$FUSE(r0, &(0x7f0000002600)={0x2020}, 0x2020) r1 = socket(0x10, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) getpeername$netlink(r1, &(0x7f0000000040), &(0x7f0000000080)=0xc) 19:58:09 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0) r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000080)={r1}, &(0x7f00000000c0)=0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) close(r2) write$sndseq(0xffffffffffffffff, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r3 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r2, r3, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 19:58:09 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100041c0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x2000000003f}, 0x15083, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x400, 0x104) ioctl$VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0xafad}) getpid() openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) r1 = socket(0x10, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x4600, &(0x7f0000000040)={0x0, 0x802}) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x501501, 0x0) ioctl$KDGETMODE(r2, 0x4b3b, &(0x7f0000000140)) 19:58:09 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x700, 0x7, 0x5}) 19:58:09 executing program 4: unshare(0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x80000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(r1, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000340)={0x2e4, r2, 0x300, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x80, 0x5c}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x250, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0xf8, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DST_MAC={0xa}, @NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @private=0xa010101}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN={0xdd, 0x8, {0x2, 0xfffeffff, "594ba5adfdfc8b9abd5dfc4a3713aa3a9b3c7864cf6282eb16c13db4909b40e1c683e6562717d61d8a753d41d972bb3f9899cde5e4e14bb908bf207e078e9d883ea3cda4b7dc83cb3fae60bf9c48cb8997f2cef56bdb7e24cd77d66a28d91e613a9cc123c014a635e07e4a10c567e9ddbd46a6f380568ec2071f3d3db0f7bd3f9b1d199d1c938cff6e17c1aa2785f33cc277dfc844180947d7e040caf6b9894a19bda4542e0143e8077f083acc9e84315e49bf1ffcc78bacbf52d1203d2211d78b4cedcd0ab4edff43c96f1441b4462dd2"}}]}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0xe4, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x7}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x8}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCAN_FREQUENCIES={0x14, 0x2c, 0x0, 0x1, [{0x8}, {0x8}]}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCHED_SCAN_MATCH={0xb0, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x91}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x400}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x8}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x9}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x1}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x3}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="353542c32223"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x54, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x3}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x6}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x4}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x20}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x101}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x7}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xffffffff}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x9}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x76b4}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x4}]}]}]}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x5c, 0x12, 0x0, 0x1, [@NL80211_ATTR_IE={0x1b, 0x2a, [@rann={0x7e, 0x15, {{0x0, 0x7}, 0x40, 0x0, @broadcast, 0x7, 0x1, 0x2}}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x9}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3ff}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8}, @NL80211_ATTR_SCAN_FREQUENCIES={0x14, 0x2c, 0x0, 0x1, [{0x8}, {0x8, 0x0, 0xdde}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7}]}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0xc, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x10, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x18, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x18, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x20, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_NET_DETECT={0x18, 0x12, 0x0, 0x1, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x5bf}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xf, 0x7f}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}]}]}, 0x2e4}, 0x1, 0x0, 0x0, 0x8880}, 0x4000045) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x58, &(0x7f0000000200)=[@in6={0xa, 0x4e23, 0x200, @mcast1, 0x7fff}, @in6={0xa, 0x4e21, 0x9a46, @mcast1, 0x101}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e23, @private=0xa010101}]}, &(0x7f0000000280)=0x10) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f00000006c0)) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f00000002c0)={r4, 0x4, "ca7f690b"}, &(0x7f0000000300)=0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 19:58:09 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x8400941f, &(0x7f0000000040)={0x1}) 19:58:09 executing program 4: unshare(0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c00000008060103000000000000000000000000050001000700000085b9141738fef275f5ceae9aedd89c77eaff8fdea1afd97089d0da20e9db42a359a541036c48d8bc8d69b56710dfd902f0337204d9d6ff28c85c00382c050d570a8e869c185c980015a0c054b7648edb67843706a6e064664a0ee19b7e1cd9c61b28792ef71d536dd832ef1be6473e5f614af3c5153e57bfe68a8db6b708000000a15c254162fd8e57f8a200"/178], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) [ 711.412997][ T35] audit: type=1800 audit(1608580689.768:48): pid=22338 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15765 res=0 errno=0 19:58:09 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = fcntl$dupfd(r1, 0x0, r0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004800}, 0x40040) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0x2, @local, 'vcan0\x00'}}, 0x1e) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x4600, &(0x7f0000000040)={0x0, 0x7}) 19:58:09 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0) r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000080)={r1}, &(0x7f00000000c0)=0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r3 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r3, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r4 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r2, r4, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 19:58:10 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x3389, 0x7, 0x5}) 19:58:10 executing program 4: unshare(0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r1 = socket(0x10, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) r2 = socket(0x10, 0x0, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20044000) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000000)={0x41, 0x1, 0x5, 0x7, 0x1, [{0xd188, 0x7, 0x0, [], 0x3000}]}) [ 711.699026][ T35] audit: type=1800 audit(1608580690.058:49): pid=22352 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15765 res=0 errno=0 19:58:10 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x1, 0x6, 0x0, 0x0, 0x0, {0x1, 0x0, 0xff}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000001) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x4600, &(0x7f0000000040)={0x0, 0x7}) 19:58:10 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0) r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000080)={r1}, &(0x7f00000000c0)=0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r3 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r3, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r4 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r2, r4, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) [ 711.797460][ T35] audit: type=1800 audit(1608580690.088:50): pid=22352 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15765 res=0 errno=0 19:58:10 executing program 5: clone3(&(0x7f0000000200)={0x4c000100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) recvmsg(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/89, 0x59}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f0000000100)=""/5, 0x5}], 0x3}, 0x2020) sched_rr_get_interval(0x0, &(0x7f0000000280)) socketpair(0x1, 0xa, 0x4, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x54, r2, 0x61b, 0x0, 0x0, {}, [@FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private1}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @loopback}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6, 0x1, 0xfffb}, @FOU_ATTR_IFINDEX={0x8}]}, 0x54}}, 0x0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000001380)={&(0x7f00000012c0), 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x2c, r2, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast1}, @FOU_ATTR_PEER_V4={0x8, 0x8, @remote}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @loopback}]}, 0x2c}}, 0x0) 19:58:10 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x8933, 0x7, 0x5}) [ 712.012614][T22362] IPVS: ftp: loaded support on port[0] = 21 [ 712.075778][ T35] audit: type=1800 audit(1608580690.438:51): pid=22369 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15765 res=0 errno=0 19:58:10 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x11200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x4600, &(0x7f0000000040)={0x0, 0x7}) rt_sigprocmask(0x0, &(0x7f0000000080)={[0x800000000008]}, &(0x7f00000000c0), 0x8) [ 712.181077][ T35] audit: type=1800 audit(1608580690.468:52): pid=22369 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15765 res=0 errno=0 19:58:10 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0) r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000080)={r1}, &(0x7f00000000c0)=0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r3 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r3, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r4 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r2, r4, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) [ 712.444291][ T35] audit: type=1800 audit(1608580690.798:53): pid=22398 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15765 res=0 errno=0 [ 712.527355][ T35] audit: type=1800 audit(1608580690.858:54): pid=22398 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15765 res=0 errno=0 19:58:11 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0xc0045878, &(0x7f0000000040)={0x1}) 19:58:11 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0xff00, 0x7, 0x5}) 19:58:11 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x28800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff4b5, 0x0, @perf_config_ext={0x1, 0x80}, 0x0, 0x4, 0x2, 0x0, 0x9, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r1, 0x0) getpid() setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000080)=0x7, 0x4) r2 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x4600, &(0x7f0000000040)={0x0, 0x7}) 19:58:11 executing program 5: clone3(&(0x7f0000000200)={0x4c000100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) recvmsg(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/89, 0x59}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f0000000100)=""/5, 0x5}], 0x3}, 0x2020) sched_rr_get_interval(0x0, &(0x7f0000000280)) socketpair(0x1, 0xa, 0x4, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x54, r2, 0x61b, 0x0, 0x0, {}, [@FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private1}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @loopback}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6, 0x1, 0xfffb}, @FOU_ATTR_IFINDEX={0x8}]}, 0x54}}, 0x0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000001380)={&(0x7f00000012c0), 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x2c, r2, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast1}, @FOU_ATTR_PEER_V4={0x8, 0x8, @remote}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @loopback}]}, 0x2c}}, 0x0) 19:58:11 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0) r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000080)={r1}, &(0x7f00000000c0)=0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r3, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r4 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r2, r4, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) [ 712.719759][ T35] audit: type=1800 audit(1608580691.078:55): pid=22407 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15765 res=0 errno=0 [ 712.757155][T22408] IPVS: ftp: loaded support on port[0] = 21 19:58:11 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(0xffffffffffffffff, 0xc01864ba, &(0x7f0000000080)={0x2, 0x88ae, 0x5, 0xe0e0e0e0}) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x4600, &(0x7f0000000040)={0x0, 0x7}) 19:58:11 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x1000000, 0x7, 0x5}) 19:58:11 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x4600, &(0x7f0000000040)={0x0, 0x7}) 19:58:11 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x2000000, 0x7, 0x5}) 19:58:11 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000080)={0x9, 0x700, 0x1}) r2 = fcntl$getown(0xffffffffffffffff, 0x9) capget(0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0xa2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x9}, 0x0, 0x9, 0x8, 0x9, 0x90, 0x100, 0x4c70}, r2, 0xb, 0xffffffffffffffff, 0xa) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvme-fabrics\x00', 0x105041, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r1, 0x4010ae74, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa0000080001001000000008000300000000000a000500040000000000000008000a00", @ANYRES32=0x0, @ANYBLOB="09c74edc0177cd450eb5fb8ab48a5d03c649a16a5076cd8cc5a9a3139a17a6eba63e99d5a7000000d7528bee9670fe12dd0ac71e727f1be641f0fc28ac202b22ed4d2c41483c677af19364d4f8fb45992e012700fe83720bd770ecfcccaa75cfe78e44d40dbf16400c238bc811275da478d3552bd328858a2ef1fc2a5a79f5dbb1f15bfa9bb4f4b4bd37d8f1cc554c6d686fed9ad46ba6d96ede81a34006ca80552435e09127e28d911fb0ac39fc18553c5f0109c1a0d5d1a2b869d0a6ac7c0705b165d7a47d4cf378a216d0b6606003d5244e1452c5e85e18658a3f6a6789c8b6c96f6551e5e0e5ad936dba435cff4bf265"], 0x64}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x400000000000075, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 19:58:11 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = socket(0x10, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000000c0)={0x1, 0x7, 0x8202, 0x2, 0x3, 0x7, 0x80000000, 0x1d19631b}, &(0x7f0000000100)=0x20) ptrace$peek(0x3, r0, &(0x7f0000000080)) r2 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mq_open(&(0x7f0000000180)='\x00', 0x2, 0x84, &(0x7f00000001c0)={0x9, 0x7ff, 0x4, 0x89}) ioctl$RTC_RD_TIME(r4, 0x80247009, &(0x7f0000000140)) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x4600, &(0x7f0000000040)={0x0, 0x7}) 19:58:11 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0) r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000080)={r1}, &(0x7f00000000c0)=0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r3, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r4 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r2, r4, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) [ 713.711078][T22456] netlink: 'syz-executor.5': attribute type 5 has an invalid length. [ 713.798815][T22462] netlink: 'syz-executor.5': attribute type 5 has an invalid length. 19:58:12 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0xc0045878, &(0x7f0000000040)={0x1}) 19:58:12 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000000c0)={0x1, 0x1, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x4, 0x8}) r2 = getpid() sched_setscheduler(r2, 0x0, 0x0) kcmp(r1, r2, 0x0, r0, r0) getpid() openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000080)={0x1, 0xffffffffffffffff, 0x1}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r3, 0x4600, &(0x7f0000000040)={0x0, 0x7}) 19:58:12 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x3000000, 0x7, 0x5}) 19:58:12 executing program 5: mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)='fusectl\x00', 0x40c0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_uring_register$IORING_UNREGISTER_EVENTFD(r1, 0x5, 0x0, 0x0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x208200) r3 = getpid() sched_setscheduler(r3, 0x0, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) futex(&(0x7f00000000c0)=0x1, 0x9, 0x2, &(0x7f0000000200)={r5, r6+10000000}, &(0x7f0000000240)=0x1, 0x2) read(r4, &(0x7f0000000180)=""/19, 0xfffffe47) futimesat(0xffffffffffffffff, 0x0, 0x0) 19:58:12 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0) r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000080)={r1}, &(0x7f00000000c0)=0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') close(0xffffffffffffffff) r2 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r2, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r3 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 19:58:13 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) getpid() r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x4600, &(0x7f0000000040)={0x0, 0x7}) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) 19:58:13 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0) r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000080)={r1}, &(0x7f00000000c0)=0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') close(0xffffffffffffffff) r2 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r2, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r3 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 19:58:13 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x4000000, 0x7, 0x5}) 19:58:13 executing program 5: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) setpgid(r0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x3) pipe(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b04b281b602d656f56dd43cfe737581a32b6bc24ac019cfa3f15e0e04856f17c362dbea6f771a34e3d5a7ec64dd5eec7d110c3a4aa834a58af3f6464c1bce6ac31922c427a16bc65c7dd99d6544f6f7339a02064e7e9ee7aab2d887a090a7fd354a10f61a9c7ddc0d9fbbc39ec936153b85d861b0890ccdad391ca9834087bd289b9e243f43ccc310b73d907cadfeb5e0ba304dcf5d39bb456fb55e6b945981ff573103064c2b4b8d3ecb6f1e5a8", @ANYRES64], 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50c, 0x842, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8012, 0xcf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) setxattr$security_capability(&(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000000)=@v2={0x2000000, [{}, {0xfffffffc}]}, 0x14, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x4200, 0x166) 19:58:13 executing program 0: perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x808, 0x0, 0x7, 0x0, 0xfffffffffffffffc, 0x0, 0x49}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000080)={0xdf0, 0x2, 0xfffffffd, 0xcaa, [], [], [], 0x80000000, 0x7ea9, 0x10001, 0x3f, "5ab43804e4cead72387d7c8faf12574e"}) getpid() r0 = socket(0x10, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) connect$packet(r0, &(0x7f00000001c0)={0x11, 0x2, 0x0, 0x1, 0x1, 0x6, @multicast}, 0x14) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x4600, &(0x7f0000000040)={0x0, 0x6}) 19:58:13 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0) r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000080)={r1}, &(0x7f00000000c0)=0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') close(0xffffffffffffffff) r2 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r2, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r3 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 19:58:13 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x5000000, 0x7, 0x5}) 19:58:15 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0xc004743e, &(0x7f0000000040)={0x1}) 19:58:15 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x41c0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x220, 0x1000000000000, 0x5, 0x4, 0x0, 0x0, 0x9}, 0x0, 0x2, 0xffffffffffffffff, 0x1) r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000640)='fou\x00') sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000700)={&(0x7f0000000780)=ANY=[@ANYBLOB="00000000a2bfad9749778f74a48a56d5d8ac83ab680bccfd4316e67506da86c9f2ccc9131501e200efc744bba9d66e0770acd8d42472b9a2cd023fd6eda220f443c604857ccdc95c361f5ac7de12b9b8dbd63c363f620ac291f74ae239424061870f224a85720327b7ab20af5a447e099e8036df039eea6ca6798d8c2214a3d4da95a00ab9462f843c050a85713b5ba0505d2ff2c3e50a", @ANYRES16=r0, @ANYBLOB="00022bbd7000ffdbdf250300000014000700fe8000000000000000000000000000bb050003000c0000000400050014000900"/66], 0x48}, 0x1, 0x0, 0x0, 0x47992d9a985c2953}, 0x1) getpid() r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="70000000051400082abd7000fbdbdf2508000100020000000800030001000000080001000200000008000300010000000800010002000000080003000000000008000100020000000800030001000000080001000200edff070003000400000008000100010000000800030000000000"], 0x70}, 0x1, 0x0, 0x0, 0x4c840}, 0x24008854) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x4600, &(0x7f0000000040)={0x0, 0x7}) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000680)={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3b}}, {0x0, @broadcast}, 0x1c, {0x2, 0x4e24, @local}, 'veth0_to_team\x00'}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000000c0)={0x0, 0x8001, 0x8}) 19:58:15 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x6000000, 0x7, 0x5}) 19:58:15 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00') sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="86320000", @ANYRES16=r2, @ANYBLOB="08002bbd7000fddbdf252b00000008000300", @ANYRES32=0x0, @ANYBLOB="08000c0064000000040046001c007e0078f3c007a8d1c1256a147756bded397f2b598dc75115c3c3040044001e001f00000303070000000000000005000700130000000600ff7f000002000023003400c1b9713dc0be87bac2f67926e724f369aa7869334dc7719d1238d310ffe881000a0006009ae7231367fa00001e00940040000c01000000000000000200040008000000080009000000550000110024001b006085c8868b018c86020ba4000000"], 0xcc}, 0x1, 0x0, 0x0, 0x48004}, 0xc884) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x1, 0x0, @ioapic={0x2, 0x8000, 0x1, 0x200, 0x0, [{0x8, 0x40, 0x3f, [], 0x3f}, {0x3, 0x1, 0x80, [], 0x53}, {0x9, 0x6, 0x5, [], 0xbb}, {0x0, 0x1, 0x40, [], 0x80}, {0x46, 0x4, 0x7, [], 0x2e}, {0x7, 0x5, 0x3, [], 0x9}, {0x5, 0x3f, 0x1, [], 0x20}, {0x9, 0x3f, 0x4, [], 0x3f}, {0x9, 0xd9, 0x35, [], 0x68}, {0xb7, 0x9, 0x4, [], 0x8e}, {0x6, 0x6, 0x40, [], 0x81}, {0x7f, 0xcb, 0x2}, {0xff, 0x20, 0xff, [], 0x9}, {0x80, 0xf7, 0x7, [], 0x5}, {0x5, 0x7, 0x5, [], 0x4}, {0x2, 0x0, 0xf9, [], 0x4}, {0x8c, 0x3, 0x1f, [], 0x9}, {0xb3, 0x8, 0x7, [], 0x3}, {0x7, 0x80, 0x9, [], 0x3}, {0x9, 0x7f, 0x1}, {0x6c, 0x1, 0x9d, [], 0x5d}, {0x4, 0x2, 0x1f, [], 0x3f}, {0x2, 0x2, 0x5, [], 0x5}, {0x5, 0x2, 0x20, [], 0x1}]}}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) statx(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) ioprio_get$uid(0x3, 0x0) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, 0x0) 19:58:15 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0) r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000080)={r1}, &(0x7f00000000c0)=0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r3, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r4 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r2, r4, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 19:58:15 executing program 4: unshare(0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x20040001, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000400)={&(0x7f00000000c0), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, r3, 0x100, 0x70bd2d, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x57e}]}, 0x20}, 0x1, 0x0, 0x0, 0x11}, 0x800) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x40, r3, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3ea9}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000800}, 0x20004000) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ZERO(r4, 0x0, 0x48f, &(0x7f0000000140)={0x6c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x0, 'lblc\x00', 0xd2e5c79b2cd8c49c, 0x5, 0x7b}, 0x2c) 19:58:15 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0) r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000080)={r1}, &(0x7f00000000c0)=0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r3, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r4 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r2, r4, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) [ 717.102449][T22530] IPVS: set_ctl: invalid protocol: 108 172.30.1.5:20001 19:58:15 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x4600, &(0x7f0000000040)={0x0, 0x7}) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_START(r0, 0x5402) ioctl$HIDIOCGREPORT(r0, 0x400c4807, &(0x7f00000000c0)={0x2, 0x2, 0xffffffff}) 19:58:15 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x7000000, 0x7, 0x5}) 19:58:15 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x41c0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x220, 0x1000000000000, 0x5, 0x4, 0x0, 0x0, 0x9}, 0x0, 0x2, 0xffffffffffffffff, 0x1) r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000640)='fou\x00') sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000700)={&(0x7f0000000780)=ANY=[@ANYBLOB="00000000a2bfad9749778f74a48a56d5d8ac83ab680bccfd4316e67506da86c9f2ccc9131501e200efc744bba9d66e0770acd8d42472b9a2cd023fd6eda220f443c604857ccdc95c361f5ac7de12b9b8dbd63c363f620ac291f74ae239424061870f224a85720327b7ab20af5a447e099e8036df039eea6ca6798d8c2214a3d4da95a00ab9462f843c050a85713b5ba0505d2ff2c3e50a", @ANYRES16=r0, @ANYBLOB="00022bbd7000ffdbdf250300000014000700fe8000000000000000000000000000bb050003000c0000000400050014000900"/66], 0x48}, 0x1, 0x0, 0x0, 0x47992d9a985c2953}, 0x1) getpid() r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="70000000051400082abd7000fbdbdf2508000100020000000800030001000000080001000200000008000300010000000800010002000000080003000000000008000100020000000800030001000000080001000200edff070003000400000008000100010000000800030000000000"], 0x70}, 0x1, 0x0, 0x0, 0x4c840}, 0x24008854) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x4600, &(0x7f0000000040)={0x0, 0x7}) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000680)={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3b}}, {0x0, @broadcast}, 0x1c, {0x2, 0x4e24, @local}, 'veth0_to_team\x00'}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000000c0)={0x0, 0x8001, 0x8}) 19:58:15 executing program 4: unshare(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 19:58:15 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0) r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000080)={r1}, &(0x7f00000000c0)=0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r3, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r4 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r2, r4, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 19:58:16 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0xc0085504, &(0x7f0000000040)={0x1}) 19:58:16 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x4, 0x0, 0x200000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x3}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000100)={r1, 0x40a5eeab}, &(0x7f0000000140)=0x8) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0xff) getpid() r3 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r3, 0x4600, &(0x7f0000000040)={0x0, 0x7}) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 19:58:16 executing program 4: unshare(0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000040)=0x1) ioctl$VT_DISALLOCATE(r1, 0x5608) 19:58:16 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x8000000, 0x7, 0x5}) 19:58:16 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fcntl$lock(r0, 0x7, &(0x7f0000000280)) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x9}) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$chown(0x4, r4, 0x0, 0x0) keyctl$get_persistent(0x16, r3, r4) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$chown(0x4, r6, 0x0, 0x0) keyctl$get_persistent(0x16, r5, r6) keyctl$KEYCTL_MOVE(0x1e, 0x0, r4, r6, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000000)) 19:58:16 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0) r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000080)={r1}, &(0x7f00000000c0)=0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) chdir(&(0x7f0000000240)='./file0\x00') r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r3, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r4 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r2, r4, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 19:58:16 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x20000880) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000080), &(0x7f00000000c0)=0x8) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x4600, &(0x7f0000000040)={0x0, 0x7}) 19:58:16 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0) r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000080)={r1}, &(0x7f00000000c0)=0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) chdir(&(0x7f0000000240)='./file0\x00') r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r3, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r4 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r2, r4, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 19:58:16 executing program 5: openat$rtc(0xffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000300)={'ip6gre0\x00', 0x0, 0x4, 0x4, 0x3, 0xff, 0x48, @mcast1, @empty, 0x8000, 0x80, 0x3, 0x6}}) sendto$packet(0xffffffffffffffff, &(0x7f0000000240)="892ac09a4a5171cc8fc9ea9b53c41d5137d9120c9be6dfaa6caef98d567d4402bc260d143dd226855f884ac9cd003d93a969d8d5bc640edf8921d2eccd47aaead449faba6639486172b897161a57017a0b3dcae802d6139233309bfe702e6143bce0c0214e15a6d1e2f9e2668d375d97e3de64f17f684fcf373df0699c2c8992021164c3e8ff0e28b848", 0x8a, 0x8041, &(0x7f00000001c0)={0x11, 0x9, r3, 0x1, 0x9b, 0x6, @local}, 0x14) 19:58:16 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000100)={'broute\x00'}, &(0x7f0000000200)=0x78) unshare(0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x40) ioctl$CAPI_NCCI_GETUNIT(r1, 0x80044327, &(0x7f0000000040)=0x18000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r2, &(0x7f0000000280)="49e1f971f58c15d0d1bed961fdd0861a2fa710123295d6a55e5b6c67aa48751eb36996b96cc95f88d86b02e816241931ba0879d128f85648acdaf5a6ef358078cd9d2dcbb285073de408d2911a478f0a64364e1135cf74ed0ecd9553681babfca04c5c669649bfd045d035bf5d1ce94156d643adc4952acd0f0636ee575ca9b80cf97c081d00b775ef9e0cf77e98eac4a8717fddbc1230b120f4376a1bf6848f07cbe7f5a99f0fa5c5b7b0e192691bbff6fe1504edf5f51251ab4d09a9ef6f3c1b72c2ed7e10af4797c9be7f9f4bb0dd8391b0718387976bafcad0d07521f4eb3f1a552f7af3c3e0fe4fbb0f45d740c77a7890a208747895", 0xf8, 0x4004000, 0x0, 0x0) r4 = dup(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_ENUM_FRAMESIZES(r4, 0xc02c564a, &(0x7f00000000c0)={0x6, 0x32314247, 0x3, @discrete={0x94, 0x8}}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000500010000000000000000000000000000000000200000"], 0x1c}}, 0x0) 19:58:16 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x33890000, 0x7, 0x5}) 19:58:17 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = dup(0xffffffffffffffff) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002b000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f0000000100)="b805000000b94a0000000f01c10f00d4b93c0200000f320f0666b80a008ec00f09c4c125d5b370199ca9c7442400a4b9b4edc74424024ddf3ba1c7442406000000000f011c24b8010000000f01c1660f3881530f"}], 0x15555555555555d2, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f000099e000)={0x2, 0x4e20, @dev}, 0x10) sendto$inet(r5, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r6 = gettid() ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000080)=r6) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000000)=r6) 19:58:17 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0xc0105512, &(0x7f0000000040)={0x1}) 19:58:17 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0) r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000080)={r1}, &(0x7f00000000c0)=0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) chdir(&(0x7f0000000240)='./file0\x00') r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r3, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r4 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r2, r4, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 19:58:17 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$2(0x2, 0x7f, &(0x7f0000000080)=""/79) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x4600, &(0x7f0000000040)={0x0, 0x7}) 19:58:17 executing program 4: unshare(0x0) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000008060102dfff000000000000000000000500010007000000"], 0x1c}}, 0x0) 19:58:17 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0xff000000, 0x7, 0x5}) 19:58:18 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0) r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000080)={r1}, &(0x7f00000000c0)=0x18) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r3, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r4 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r2, r4, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 19:58:18 executing program 4: unshare(0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1ce600000806010200000000000000877c87e6bc53afcb0007000000"], 0x1c}}, 0x0) 19:58:18 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x100000000000000, 0x7, 0x5}) 19:58:18 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x4600, &(0x7f0000000040)={0x0, 0x7}) 19:58:18 executing program 4: unshare(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETODELAY(0xffffffffffffffff, 0x80045017, &(0x7f0000000000)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 19:58:18 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0) r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000080)={r1}, &(0x7f00000000c0)=0x18) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r3, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r4 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r2, r4, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) [ 720.412709][T22596] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 19:58:19 executing program 5: set_mempolicy(0x4003, &(0x7f0000000000)=0xd000000000000003, 0x2) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x0, 0x0) r2 = signalfd4(r0, &(0x7f0000000080)={[0xff]}, 0x8, 0x0) getsockopt$inet6_int(r2, 0x29, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000140)=""/206, 0xce}, {&(0x7f00000005c0)=""/257, 0x14a}, {&(0x7f00000004c0)=""/230, 0xe6}], 0x3, 0x80400000, 0x6) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$alg(0x26, 0x5, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) modify_ldt$read(0x0, &(0x7f00000003c0)=""/72, 0x48) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r7, @ANYBLOB="0100000000000000140012800b00010062726964676500000400028017aa5a956442282b34962c1ccec1458be5d967e4f6b95ec7ac6f7db8593b46032d1ae4a29201d2736bd6ebd4580e19f4200cdd7090b6e6efe80ebc4f330b5239d098215758ceb92bb0dc7aa09855fb4eb8f48f4b0b0add28de82bbe4fc6ed4c3c4bf25569a1b9ca220f1c05be5a6f89a11d06d58c25fdc928a49eb0daa226b639d0e6eb3a771f690a92c7e4c7c4ab12196425a70673735bb59ad1242c030bb4b16a53891899f122e2d4ebc8f681c9f1226b46a74fe43ae7aab69d95c3ad464e3c3ce17c71575809b1979f7f93b25095a22297d"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x8}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x2}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wg1\x00'}]}, 0x44}}, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f00000002c0)={@private=0xa010101, @broadcast, r7}, 0xc) bind$alg(r4, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'rmd128-generic\x00'}, 0x58) 19:58:19 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x200000000000000, 0x7, 0x5}) 19:58:19 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0) r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000080)={r1}, &(0x7f00000000c0)=0x18) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r3, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r4 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r2, r4, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 19:58:19 executing program 4: unshare(0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) semctl$GETVAL(0xffffffffffffffff, 0x1, 0xc, &(0x7f0000000200)=""/254) 19:58:19 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0xc0109207, &(0x7f0000000040)={0x1}) 19:58:19 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x4600, &(0x7f0000000040)={0x0, 0x7}) 19:58:19 executing program 4: unshare(0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000008060102000000002586b71d000000000500010007000000"], 0x1c}}, 0x0) 19:58:19 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() alarm(0x3) r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x4600, &(0x7f0000000040)={0x0, 0x7}) 19:58:19 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0) r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r2, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r3 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r1, r3, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 19:58:19 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x300000000000000, 0x7, 0x5}) 19:58:19 executing program 4: unshare(0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x8, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL]}, 0xffffffffffffff85}}, 0x0) r1 = socket(0x10, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000000), 0x4) [ 721.368000][ T35] kauditd_printk_skb: 9 callbacks suppressed [ 721.368020][ T35] audit: type=1800 audit(1608580699.728:65): pid=22673 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15765 res=0 errno=0 [ 721.560406][ T35] audit: type=1800 audit(1608580699.758:66): pid=22673 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15765 res=0 errno=0 19:58:20 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mq_timedsend(r2, &(0x7f0000000080)="0418bd1ad51f3933f2c4fbfb71ea7d74fc3ebc596097af62b5d4b0bf848003f9d185590baf55c724162e854214d471103980df9acf4109fa46b52eff0c4f7cb5756481cf7c3f2a89b46295f285c9ae6ac632a0a92c6799617f5ebffd4ba514533ac376b9f305e2aa5f6b805532fdfdb8345544a76d46f4e9af285eb56765a0dcbbe96be2015a6dc318a2e27a0e6d20f7f12747c7ec24d3d61472414121b1c99e6974ddfa298dd2ab4c36645776b0c11860df702605f7248d2850052beaba6e9c7ced52daec5bfcd5f828d7764503212af98f52f48522c87967bf", 0xda, 0x7f3d, &(0x7f0000000180)={0x0, 0x3938700}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x4600, &(0x7f0000000040)={0x0, 0x7}) 19:58:20 executing program 5: set_mempolicy(0x4003, &(0x7f0000000000)=0xd000000000000003, 0x2) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x0, 0x0) r2 = signalfd4(r0, &(0x7f0000000080)={[0xff]}, 0x8, 0x0) getsockopt$inet6_int(r2, 0x29, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000140)=""/206, 0xce}, {&(0x7f00000005c0)=""/257, 0x14a}, {&(0x7f00000004c0)=""/230, 0xe6}], 0x3, 0x80400000, 0x6) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$alg(0x26, 0x5, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) modify_ldt$read(0x0, &(0x7f00000003c0)=""/72, 0x48) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r7, @ANYBLOB="0100000000000000140012800b00010062726964676500000400028017aa5a956442282b34962c1ccec1458be5d967e4f6b95ec7ac6f7db8593b46032d1ae4a29201d2736bd6ebd4580e19f4200cdd7090b6e6efe80ebc4f330b5239d098215758ceb92bb0dc7aa09855fb4eb8f48f4b0b0add28de82bbe4fc6ed4c3c4bf25569a1b9ca220f1c05be5a6f89a11d06d58c25fdc928a49eb0daa226b639d0e6eb3a771f690a92c7e4c7c4ab12196425a70673735bb59ad1242c030bb4b16a53891899f122e2d4ebc8f681c9f1226b46a74fe43ae7aab69d95c3ad464e3c3ce17c71575809b1979f7f93b25095a22297d"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x8}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x2}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wg1\x00'}]}, 0x44}}, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f00000002c0)={@private=0xa010101, @broadcast, r7}, 0xc) bind$alg(r4, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'rmd128-generic\x00'}, 0x58) 19:58:20 executing program 4: unshare(0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000000)={'filter\x00'}, &(0x7f00000000c0)=0x78) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 19:58:20 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x400000000000000, 0x7, 0x5}) 19:58:20 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x20000880) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000080)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xe, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x7, 0x20010, r1, 0x596a0000) getpid() r2 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x4600, &(0x7f0000000040)={0x0, 0x7}) 19:58:20 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0) r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r2, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r3 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r1, r3, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) [ 722.429543][ T35] audit: type=1800 audit(1608580700.788:67): pid=22702 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15765 res=0 errno=0 [ 722.507742][ T35] audit: type=1800 audit(1608580700.818:68): pid=22702 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15765 res=0 errno=0 19:58:21 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0xc0189436, &(0x7f0000000040)={0x1}) 19:58:21 executing program 4: unshare(0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x7}, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 19:58:21 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x500000000000000, 0x7, 0x5}) 19:58:21 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x4) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x4600, &(0x7f0000000040)={0x0, 0x7}) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000080)=0x8) 19:58:21 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x300000000000000, 0x7, 0x5}) 19:58:21 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0) r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r2, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r3 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r1, r3, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) [ 723.309405][ T35] audit: type=1800 audit(1608580701.668:69): pid=22721 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15765 res=0 errno=0 19:58:21 executing program 4: unshare(0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fanotify_mark(0xffffffffffffffff, 0x20, 0x48000012, r2, &(0x7f0000000000)='./file0\x00') sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x20, 0x8, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}}, 0x0) [ 723.486770][ T35] audit: type=1800 audit(1608580701.698:70): pid=22721 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15765 res=0 errno=0 19:58:21 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() alarm(0x3) r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x4600, &(0x7f0000000040)={0x0, 0x7}) 19:58:21 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x600000000000000, 0x7, 0x5}) 19:58:21 executing program 0: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7226, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x4600, &(0x7f0000000040)={0x0, 0x7}) 19:58:21 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0) socket$inet(0x2, 0x80001, 0x84) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 19:58:22 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) [ 723.765328][ T35] audit: type=1800 audit(1608580702.128:71): pid=22743 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15765 res=0 errno=0 [ 723.896354][ T35] audit: type=1800 audit(1608580702.138:72): pid=22743 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15765 res=0 errno=0 19:58:22 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0xc020660b, &(0x7f0000000040)={0x1}) 19:58:22 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x4) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x4600, &(0x7f0000000040)={0x0, 0x7}) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000080)=0x8) 19:58:22 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x700000000000000, 0x7, 0x5}) 19:58:22 executing program 4: unshare(0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c004000000000000000000000000500010007000001000000000000"], 0x1c}}, 0x0) 19:58:22 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x4600, &(0x7f0000000040)={0x0, 0x7}) fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='system.posix_acl_access\x00', &(0x7f0000001580)=ANY=[@ANYBLOB="02000000010005000000000002000500", @ANYRES32=0x0, @ANYBLOB="02000500", @ANYRES32=0xee00, @ANYBLOB="040002000000000008000100", @ANYRES32, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08040000", @ANYRES32=0xee01, @ANYBLOB="08000200", @ANYRES32=r3, @ANYBLOB="08000200", @ANYRES32=0xee00, @ANYBLOB="10000600000000002000040000000000"], 0x6c, 0x0) r4 = getpid() sched_setscheduler(r4, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000003a80)={{{@in=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@private2}}, &(0x7f0000003b80)=0xe8) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(r6, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='system.posix_acl_access\x00', &(0x7f0000001580)={{}, {0x1, 0x5}, [{0x2, 0x5}, {0x2, 0x5, 0xee00}], {0x4, 0x2}, [{0x8, 0x1, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x4}, {0x8, 0x4}, {0x8, 0x0, 0xee01}, {0x8, 0x2, r7}, {0x8, 0x2, 0xee00}], {0x10, 0x6}, {0x20, 0x4}}, 0x6c, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x20000880) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000003c00)={&(0x7f0000003bc0)='./file0\x00'}, 0x10) r10 = socket(0x10, 0x0, 0x0) write(r10, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) r11 = socket(0x10, 0x0, 0x0) write(r11, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003d00)=[{&(0x7f0000000080)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000100)="c418f4b1966b3904de83e3ea984811760f03b0334011b2ed987172d975edd0e3430f4df429ecef5c207d59c549f108d9f1698ea62aa79b94966e3138566302671436c58ce773f2a2b2667ecbb2f935d421adf6938e71e061564fb7a3173ff32b72d8143582e1670f5b13d8cebf47ee47b5a3e32518a02406b8ee48b69817a0575b918c4687ec6a5d05e3543939c17f0f12082feaeb89ba15a39bf643097d2675f7779d0ef44fc04b1b", 0xa9}], 0x1, &(0x7f0000002400)=[@rights={{0x20, 0x1, 0x1, [r0, 0xffffffffffffffff, r2, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x20, 0x1, 0x1, [r0, 0xffffffffffffffff, r0, r2]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r1}}}, @cred={{0x1c, 0x1, 0x2, {r1, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r1, 0xee00, 0xee00}}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r2, 0xffffffffffffffff]}}], 0x148, 0x4000800}, {&(0x7f0000002580)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000002880)=[{&(0x7f0000002600)="bf508c3de0bab5e239649e0d1c0eb7c14661a9c17e39d4b0ad91a8dda96788e119d97b1b95e81fa62c4d5fd11fbdb124f5369faf02372b9c0b3bb34f39b480112b5749faa2217179171b9e6b5ecee74f6fb7bda56a53aa1ff7a226308ac78cf2ce02fc2a04fd7ced1365f4d8d1b7a4cb609707b6b09ca78f9a6879da226ebd32b1fcac", 0x83}, {&(0x7f00000026c0)="bffca1c230598161b513803fe71d4f8c9a5c849d2ca214addc9e9314c6bc8c50703f2f243900723ff2957d5edf162a683f67f912a95c1a3201d8e365de4c5c605d6326b17f5bf4c3fddfa3fbaeb6ebc63344418ff3abca1deedffa7c260669333f18f931", 0x64}, {&(0x7f0000002740)="a0166a42814e8d9f46371501e53eccf9801c7eef", 0x14}, {&(0x7f0000002780)="5f1b55071a4470e0907fdde37c731f250cbdf09cd73bff5ee8382d22fd17b2895f4199e4888ba7e4e38323bf845fa420bd5b3af3f10fb24f39d8de831a245447983748c1e7cc09d1ac588b8bfa2db5d9016d9845568d6435c326a70dc188b792af121edef480832b0a1a1ac8fe04b691273ed754b998bc5fbedea876fe53a9f179263ab8151cad54c455550663f5cbea9bc4bde283898d0e318a2fee62c5d6b3d99c6033373b6daa0130662a82464a17f4533c86de1adef4e304b5207ee05bab6c17eb2ffc1e1b2de995919a540d2bb36d801e67eac3187d3042dac1cd776045a921cee5", 0xe4}], 0x4, &(0x7f00000028c0)}, {&(0x7f0000002900)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002b00)=[{&(0x7f0000002980)="a5a2cac311a024995ab97392079e694c495416a0fa6b2ebf10609806f2eca9bed4df5ba45b004834654ec8e62700b6ae9efba5eaf8450c8179004876f061f35309ee63be47dbb80641109aadcd3f93a0635efc56c715da74e18578f1fda32030a8dfc966424d408f5e9a7fa66df5041e0d126d", 0x73}, {&(0x7f0000002a00)="db6133ad45fa3d8520cde2fd2ad7cbecf43a5540297503f1c5d370aff893298829abf2eb1c48ac322c374bc023233c55d2ad898f061868017b2cb43ebc51bce131c7d3ddde9add731dca3ef6d7173805764b1c89dc414febd2f3afac87d016f786970c4713a6859776f93d9ca7c7429700d6f3182c7cc02a1b1c9adee5555b01b494afd1447d5382b966b0a794e123bd32dd503fd5e3e0ac4655e6e4955f4070803ac4c3f8db8b1948c5667b56ee845f497b1c70befc2ca46b04b398dc3b4757aefe202c820d28b6f36279bcea84e4746c13eaad40616f22ac7d67a905ce00c82a45a58847afafb37e6099e47b7b45", 0xef}], 0x2, &(0x7f0000002c00)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x28, 0x1, 0x1, [r2, r2, 0xffffffffffffffff, r2, r0, r2]}}], 0x60}, {&(0x7f0000002c80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003240)=[{&(0x7f0000002d00)="f5974ae1d09814af1be1bd652f120d7b92873a2daf223e0e0c885c465a4a35bb32f31404703f7a009606798a3faaa3e9e4b770bcc638996b36e1281ed12eca191c8a3717154269d7af26a463ed0da84cdd290037dee6705d8ab7cf789351e46e62ec1c6f5b05a0b7247233eeaa6bd219", 0x70}, {&(0x7f0000002d80)="792060912c3d8f92c27f5d79ca0bbdf90276560ca9cd8f243368b8f05a6ca8ab6a0f3229772042d1b19ceb3e9cb1f83710cb6d6047ff98575bd0f71c614aa83884a17d95c3cd48ee9e2f5ecf89c3332ce572905850bf462c8cb56a65c65777639504439c220523bb1b24979b7e0a3bc7106e9a8faf5d92849d0dd18eb974c35093c6bdcab6ae4c41a99e4b68b5305e39509aba174107bdcff16101a8a5698d31ec9c5d27e76f2fdfffc478e40d79653a8d8e42e41d5252629338ff53ad", 0xbd}, {&(0x7f0000002e40)="ce6939df1cec768889fc08efdb2ac036ca45d378a5d1cbad60cbcc68f7ccbcb3c1136d8e68b45218b79790063cdb437d17b1fc9aad818642ebcb1b1091a9baf06d9acfe373d048801bd43f692f31518d868ceb3b440deb807bf3efa779826fe9fd35bc40ef7aabedb464dd7232cc5a4a86f9b2e0a763155a8ac2eeeabfe04f1983ef0f1b207e653adaecc04ae758457ecb76271a0bc5f5a2a599c30244eaeea16d38df34b7957760a154573f7671d0a955f775f595afaac9dcf0a4ef8e9a4d59c204a5", 0xc3}, {&(0x7f0000002f40)="74e56b26bf641709e752bec075eea3ae258e35751a29e0f9948be89336793fb4005240c6ba3968728a6f8979bc2436c73e49594ea44ab252beedc8c86359d3e30ca74cd81d0c52c3d274f6926f1e8cd6ce2fb5a8d1b454fe276aa24daea9ea0c43117647793c5e8f16", 0x69}, {&(0x7f0000002fc0)="281daa4972b747c9a40b98c316702c39f00ba636decc9c3600d74385bebe61ad14d0797a49d2bfc678294ee7a20e54bf26567125350952aabd08c304b987ff409e93f0161e0edbc10d294f5bcc91296c69106a5f338eeedba65c", 0x5a}, {&(0x7f0000003040)="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", 0xfd}, {&(0x7f0000003140)="e44325061692f0a11f590aec3806079c6b59436b04978812cd2825afee0b60f69c4b8a674b61421bd4ab11a98b107debe126d4043403ac356e0fa5cc777e0668a3336c68c9512b330c1e54b2ee22f09f554e344b846bd7639cbc76ad2a78f43f0ce21b5662feb18f425c8196898edcb593b3dcada31cb0e683e160eaa1f261892b18eac1ab8ed5245f4b13e077bda348dcd301d6e87c2c4bd3d073827ddf6868d227b0a300d4f2684deee72bf1807a3e200b3bd7a4a4b1fa1cfb2db158912f5a497cf705b7d7cb2482c0200b600443ebc76c62c8f1f06ba0e4", 0xd9}], 0x7, &(0x7f0000003740)=[@cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x18, 0x1, 0x1, [r0, r2]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r1}}}, @cred={{0x1c, 0x1, 0x2, {r1, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r1, 0xee01}}}], 0x100, 0x4000000}, {&(0x7f0000003840)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000003a00)=[{&(0x7f00000038c0)="91b9054aeb72154fdeeeeac757019e9ca5905870667dd8dabd279d69ef4af107e12152a87c191ea66987f357371c728e5a397b5a35fa619dd452f26018b2f0149ac25b0fc911b40ec418c7c4939fe33c3360b63aaf11cc23b8899a76e895e6a158", 0x61}, {&(0x7f0000003940)="2db61cd4e0333db420deb2c3b9b9", 0xe}, {&(0x7f0000003980)="8a7f23e7413a1af167b619549ab3cd55813be14ea2bb034454fdc7149db04ef053ee226ec2e5989054e7ce5f90a56e38ff183ed6b049d041ed0776cc95206f0b010965d7e877530f3276aa630b93fd94cbd1e362df914eb8be9e9f27f8cdf73b", 0x60}], 0x3, &(0x7f0000003c40)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r3}}}, @cred={{0x1c, 0x1, 0x2, {r4, r5, r7}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x2c, 0x1, 0x1, [r8, r2, r9, r0, r10, r2, r11]}}], 0x88, 0x55f2250a3df164e1}], 0x5, 0x884) 19:58:22 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0) socket$inet(0x2, 0x80001, 0x84) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) [ 724.791061][ T35] audit: type=1800 audit(1608580703.148:73): pid=22769 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15765 res=0 errno=0 19:58:23 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x4) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x4600, &(0x7f0000000040)={0x0, 0x7}) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000080)=0x8) 19:58:23 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x800000000000000, 0x7, 0x5}) 19:58:23 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0}, 0xc008, 0x0, 0x0, 0x4, 0x9598}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x4600, &(0x7f0000000040)={0x20, 0x7, 0x5}) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x101902, 0x1) [ 724.875591][ T35] audit: type=1800 audit(1608580703.198:74): pid=22769 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15765 res=0 errno=0 19:58:23 executing program 4: unshare(0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x900, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f00000000c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000040), 0x3, 0xffffffffffffffff, 0x30, 0x1, @in6={0xa, 0x4e20, 0xf1a, @loopback, 0x6}}}, 0xa0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000004c0)={0x0, 0x4, 0x2, 0x401}, &(0x7f0000000500)=0x10) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c00000008060102000084d04f313090ca06fd6e67a207c600000000fdff000000000500010007000000"], 0x1c}}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x1c, 0x0, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x1c}}, 0x11) r2 = socket$inet6(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)={0x24, r5, 0x201, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, r5, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1000}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) [ 725.033032][T22780] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 19:58:23 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e20, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x80010, 0xffffffffffffffff, 0x80000000) sendmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}, {{&(0x7f00000000c0)=@in6={0xa, 0x4e20, 0x0, @remote}, 0x80, 0x0}}], 0x2, 0x0) 19:58:23 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() ioctl$SNDCTL_DSP_GETFMTS(0xffffffffffffffff, 0x8004500b, &(0x7f0000000080)=0x35f85ee2) r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x4600, &(0x7f0000000040)={0x0, 0x7}) 19:58:23 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x3389000000000000, 0x7, 0x5}) 19:58:23 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0xc0684608, &(0x7f0000000040)={0x1}) 19:58:23 executing program 4: unshare(0x0) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000000806fc50df4e90cd9d837e653700080000000000001983c6"], 0x1c}}, 0x0) r0 = socket(0x10, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) recvfrom$l2tp6(r0, &(0x7f00000000c0)=""/145, 0x91, 0x20, 0x0, 0x0) 19:58:23 executing program 5: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000001540)='cgroup.clone_children\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x200000000801, 0x0) keyctl$get_security(0x11, 0x0, &(0x7f0000000000)=""/31, 0x1f) write$uinput_user_dev(r0, &(0x7f0000004100)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e76, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x45c) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f00000000c0)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x100) r2 = socket(0x1, 0x803, 0x0) pipe2(&(0x7f0000002980)={0xffffffffffffffff}, 0x80000) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000002a80)={&(0x7f00000029c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002a40)={&(0x7f0000002a00)={0x34, 0x7, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x10) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r2, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001580)=ANY=[@ANYBLOB="10130000", @ANYRES16=0x0, @ANYBLOB="000297e84df3f0f30fa3d1c9811e27bd7000ffdbdf257500000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x1310}, 0x1, 0x0, 0x0, 0x800}, 0x24008000) ioctl$UI_DEV_CREATE(r0, 0x5501) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) dup3(r4, r0, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x3c, 0x0) 19:58:23 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x4, 0x3, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xc420, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x4600, &(0x7f0000000040)={0x0, 0x7}) 19:58:24 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0) socket$inet(0x2, 0x80001, 0x84) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 19:58:24 executing program 4: unshare(0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000008ec86ceaf6f577a9e3da080601020000000000000000000000000500010007000000378a198a3d6705fb6d782cfe5ec2bce8764e5e9f5a29292c6c34c543f3e5631e15397b9b0ae61eeb5983f0b0d8412dad5c5ba7661ffc28cbf2c61145d0e9e821005729c70584fe09645ba87a7ca752eeb5d53371f4d037c435e82948d4be98f1cf135761f6e56e1db8998ca7d685f555b692f102cc2bf4583e610795c1bcf94aa337d0e1a4232519065c60"], 0x1c}}, 0x0) 19:58:24 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x4600, &(0x7f0000000040)={0x0, 0x7}) 19:58:24 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0xff00000000000000, 0x7, 0x5}) [ 725.741582][T22807] input: syz1 as /devices/virtual/input/input8 19:58:24 executing program 4: unshare(0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) [ 726.007143][T22807] input: syz1 as /devices/virtual/input/input9 19:58:24 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x0, 0x2, 0x5}) 19:58:24 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x22000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x925, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getuid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$P9_RWALK(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="7e0000006f01000900400000000006000000000000000001000000010000000000000010030000000000000000000000080000000002000000000000004002000000070000000000000001030000000000000000000000100000000005000000000000000100000000070000000000000001020000000300000000000000c0665707462ca086c8e31b4c078aa95b7179bfbb273679e6afc92673eb7a9aee3a6f82365b9e995600000000dcb7582fbb7488cab91e06575d8c299c3c4424d1fa642a1ab6277d015de94c"], 0x7e) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x4600, &(0x7f0000000040)={0x0, 0x7}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r4, 0xc0945662, &(0x7f0000000100)={0x7fffffff, 0x0, [], {0x0, @reserved}}) 19:58:24 executing program 4: unshare(0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000000000000000000000000000001d000500010007000000"], 0x1c}}, 0x0) 19:58:24 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0xc0c0583b, &(0x7f0000000040)={0x1}) 19:58:24 executing program 5: sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') r2 = socket(0x10, 0x0, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f0000000280)=""/84, &(0x7f0000000300)=0x54) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x6) getpeername$packet(r1, &(0x7f00000001c0), &(0x7f0000000200)=0x14) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0xfffffffffffffce8}, 0x0) socketpair(0x6, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') connect$netlink(r4, &(0x7f0000000240)=@unspec, 0xc) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) syz_genetlink_get_family_id$ethtool(&(0x7f0000000340)='ethtool\x00') readlinkat(r6, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)=""/15, 0xf) 19:58:24 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 19:58:24 executing program 4: unshare(0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, &(0x7f0000000000)='}^\x00', &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 19:58:24 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x0, 0x3, 0x5}) 19:58:24 executing program 0: setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000080)=0xfff, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() readlinkat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=""/119, 0x77) r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(0xffffffffffffffff, 0x8004510b, &(0x7f0000000180)) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x4600, &(0x7f0000000040)={0x0, 0x7}) [ 726.476723][ T35] kauditd_printk_skb: 2 callbacks suppressed [ 726.476742][ T35] audit: type=1800 audit(1608580704.838:77): pid=22851 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15765 res=0 errno=0 19:58:25 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, &(0x7f0000000200), &(0x7f0000000280)=0x80) io_setup(0x4, &(0x7f0000000040)=0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x20000880) r4 = socket(0x10, 0x0, 0x0) write(r4, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) ioctl$FICLONE(r3, 0x40049409, r4) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) r5 = socket(0x15, 0x3, 0x80000001) io_submit(r1, 0x2, &(0x7f0000000500)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) add_key$fscrypt_provisioning(0x0, 0x0, 0x0, 0xec, 0x0) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x1d, &(0x7f00000001c0)=0x7, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000080)='bbr\x00', 0x4) write$dsp(r5, &(0x7f00000000c0)="18eb982605b0834ac958bc1693eaa608f011053871d8949df9968c4c895478d30fd26a5cf14f1a1f9309b677dafddea44b91da25aaabef", 0x37) getsockopt$inet6_mreq(r5, 0x29, 0x15, &(0x7f0000000100)={@empty}, &(0x7f0000000140)=0x14) [ 726.625505][ T35] audit: type=1800 audit(1608580704.878:78): pid=22851 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15765 res=0 errno=0 19:58:25 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x40) sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f0000000040)={0xa, 0x4e21, 0x2, @mcast2, 0xc0ac}, 0x1c, &(0x7f0000001600)=[{&(0x7f0000000200)="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", 0x1000}, {&(0x7f0000001200)="f4af0c63bf277856917cddeaf1803e2240d6788edaa65935cf8b1932482a1e54bee8675576b7c0387f812f41311a98fd4d7a88b3ab3faf8d189c06eeea4153d07f7adaee7b57c7c764ef8bd3e0f2ae40a7f9a2676b389112384e76faa65fe6488b928c2e083af2f91749367825ef7affb31651bd75e15a0aa1cc546c285c4b99dab2a526525402ede701467233c8bd8588488ca15f21061c89e0caccaef9c5ab4b7f46ab8261bc4b93f09a4e5968c4ada66829e50b4251ccd910532b8d59bb1bb255dffd9f14ab04f4a8f4a791cb102449ffd59a78bb5518250abf19307df6c4bc19d6", 0xe3}, {&(0x7f0000001300)="57a7cc7354267f6dbaf55c250a00e93a1fc320681d6a908a6b8b0760ce3b305ef1c82990cfb7e1228979e008972ac74f3579558e6cf17597f0380e7d670b9f0723ad24f62dd46ea163cf7f9b60a060bf682cc941281ec27188ad2411981d6286cbee1eb254b2a14d7a38426c7c7bc56f99ba1305959047657c2505d673152ebc6255d81feb09347602d579d9b6db593d3243c9ed7037470dbea11dca117902ac6b7407f659264a53c4f0cd5f5b80d30c4b7d9fdc50513ac9ae3d71a2ad5fc7880f314029813dd08c9ea3a66bed52ef5deaaf3d1d6ac3f9ffdb5df027c42858139bd76bff7a56896d29", 0xe9}, {&(0x7f00000000c0)="eb0018c5da3c664ab6feb2c2bfa0edef16c676c4f3fd7de0c278b32b07375f4f4fd0c6c1a5cc8850df7f0f7bbaf8d090a2d4867cab218b18d30be238b9ddb298b30377ff5dfe5340cccd5e00944d2cd5239bd5af31fc5c09ae33a097d34de8ed55bf1d1df6bc", 0x66}, {&(0x7f00000017c0)="80a25bca284798fee4e73ed0043bbaf72482d1623176b9923074d123b453462f2efd57306ee74fcf3ca23ec52a36f1ef86118588bdfc7d654dbb88f232e1f15134335a0268cebc00", 0x48}, {&(0x7f0000001480)="bde02e2c921a75b2c4f92fa151e00a0b1ca67ebdb9b23983100ee443689e24446ba74ed7d79bd4af6d2aaf3143e9095636140a1997599a487fb624289cb6d529353399f68de15601f8739590b273ff8f7442e4390ab21d3da4c06ca3b2d507040d0b8c3e541ab3c23eacbce9c66f4747e97a9176e77de07dde48ad717279d753b6a5fbd131820c39bc229e38e8d3286160fa76ad17d8498531de4361649d536b3291965217230451a647e85d996f24de4d02709c572ac756061b22dfb1965b8f", 0xc0}, {&(0x7f0000001540)="d6a875c5c32faa9dc2ed5c51274d5298e71e0701f06c592588afee5d6a9245f4c28f66994c4522fd105186d110767f7a968cd8b71ab9a3e2651e01bd963a64890455de3516280fc6c0d597224a5c1e808fecfb463ef3ec17f112d98e2f1db4c3e04485a1583565c18690e2d667b0e72314467155e8b502baf797c00f0f2da92938d5faae73676bc059", 0x89}], 0x7, &(0x7f0000001840)=[@rthdr_2292={{0x78, 0x29, 0x39, {0x6f, 0xc, 0x2, 0x7f, 0x0, [@initdev={0xfe, 0x88, [], 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @mcast1, @local, @dev={0xfe, 0x80, [], 0x2e}]}}}, @hopopts={{0xa8, 0x29, 0x36, {0x0, 0x11, [], [@generic={0x92, 0x49, "5727e69838c33119882423cfc0b3b0b484ac35cdcf8ef9b9d21e92ae18f25f6a9c5c459a20580f12cd63c8e6604a284537c994d60ab9cebbdfb58e4f974e414d140f2aac3da85421b8"}, @enc_lim={0x4, 0x1, 0x8}, @generic={0x68, 0x16, "e5d4fdc3750b049e6493bedec150beb78024e8afe538"}, @hao={0xc9, 0x10, @mcast2}, @enc_lim={0x4, 0x1, 0x7f}, @hao={0xc9, 0x10, @loopback}]}}}], 0x120}, 0x800) write$P9_RLOCK(r0, &(0x7f0000001400)={0x8, 0x35, 0x1}, 0x8) unshare(0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 19:58:25 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 19:58:25 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x0, 0x5, 0x5}) 19:58:25 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f00000000c0)={{0x2, 0x5, 0x2, 0xef, 'syz1\x00', 0x3}, 0x1, [0x7, 0x126c, 0x1, 0x4, 0x4, 0x5, 0x400000, 0x6, 0x5, 0x1f, 0x0, 0x8576, 0x100000001, 0x3, 0x8, 0x2, 0x800, 0xfffffffffffffff7, 0x4, 0x5d3a, 0xbe, 0x7, 0xffffffff, 0x9, 0x401, 0x1ff, 0x0, 0x6, 0x101, 0xffffffffffffff92, 0x800, 0x7, 0xffffffffffffffff, 0xfffffffffffffff8, 0x7ff, 0x2, 0x4, 0x96f5, 0x6, 0x8, 0x73, 0x4, 0xfffffffffffffeff, 0x0, 0x30, 0x40, 0x1, 0x4, 0x1, 0x10000, 0x2, 0x1fb2, 0x3f, 0x69, 0x8001, 0x2df5, 0x400, 0xffff, 0x1ff, 0x1, 0x1f, 0x1, 0x2aa, 0x20, 0x80000000, 0x3, 0x81, 0x1, 0x100, 0x2, 0x466f9a66, 0x1, 0x9, 0x5, 0x3, 0xfff, 0x100000001, 0x6, 0x161, 0xff, 0xe58f, 0x7b9, 0xfffffffffffff2a0, 0x8, 0x2, 0x5, 0x2, 0x5eeb, 0x40, 0x0, 0x0, 0x2, 0x800, 0x52, 0x80000000, 0x7, 0x8, 0x3f, 0x9, 0x5, 0x81, 0x40, 0x5, 0x0, 0xe4, 0x0, 0x20, 0xff, 0x8340, 0x9, 0x5, 0x10000, 0x1ff, 0x4, 0x2, 0x80000000, 0x6d60, 0x8, 0x7, 0x400, 0x7e, 0x2508, 0x2, 0xffffffffffff8e95, 0x8000000000000000, 0x5, 0x1, 0x1]}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) write$sndseq(r2, &(0x7f0000000700)=[{0x6, 0x0, 0x8, 0x6, @time={0x80000001, 0x9}, {0xdf, 0x6}, {0x5, 0x5}, @result={0x7, 0x10000}}, {0x2, 0x4, 0x5, 0xff, @tick=0x80000001, {0x4, 0xf4}, {0xdd, 0x5}, @ext={0x2c, &(0x7f00000005c0)="a2719bcc41f6c4b00facfa6774ae8bf81006ae6373f3588a2e8156437e8656a912b27853deff57474ad064cd"}}, {0x80, 0x1, 0x3, 0x8, @tick=0x40, {0x7, 0x3f}, {0x9, 0xff}, @addr={0x7f, 0x7}}, {0x81, 0x1f, 0xd0, 0x57, @time={0x7, 0x3}, {0x3f}, {0x0, 0xc}, @ext={0xf1, &(0x7f0000000600)="aefad54221444facbaba52e7f7878f6515fe4d696b773f180c2d94de053934be3b1825a387fed290c3746f74d8a95b13d7ff49784d7eb1bf5c3e75acda891bdaa36e00275f738c83da802ee6238fdc8fef25d8b2764be7a1083ab7931c3bc2afb9b30c8832e1889ccc067414193f33f3dd98ab85c139287dc4e71ecdc13d4aa02564e8aa70b1a9d10bf22ba4f4bf1b640858865eae4e6f7b5295a5ab19c299beb42411978a0bb7dc6ae388596b6ba0d465c52ddedb0f04fb895be028561d4551cfad79d3bdb29a2d26c379ac6b14117eb6dfecca60296579a79f9117614b5927baa0555cdb94a2e54d8a06fe483ef615ba"}}], 0x70) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000000080)={0x8397}) getpid() r3 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r3, 0x4600, &(0x7f0000000040)={0x0, 0x7}) 19:58:25 executing program 4: unshare(0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8271378938f8cb83}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xb8, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5, 0x83, 0x1}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40048c4}, 0x20040800) [ 726.914117][ T35] audit: type=1800 audit(1608580705.268:79): pid=22875 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15765 res=0 errno=0 [ 726.980567][ T35] audit: type=1800 audit(1608580705.308:80): pid=22875 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15765 res=0 errno=0 19:58:25 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0xca289435, &(0x7f0000000040)={0x1}) 19:58:25 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x0, 0x6, 0x5}) 19:58:25 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0xffffffffffffff5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x103382) r3 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r3, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r4 = fcntl$dupfd(r0, 0x0, r3) ioctl$USBDEVFS_GET_CAPABILITIES(r4, 0x8004551a, &(0x7f0000000100)) sendfile(r2, r2, 0x0, 0x24002da8) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x0) 19:58:25 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 19:58:25 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x4600, &(0x7f0000000040)={0x0, 0x7}) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7fffffff, 0x480002) 19:58:25 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000500010007000000"], 0x1c}}, 0x0) 19:58:25 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000000806010200010007000000"], 0x1c}}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2a28210}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0x2c0, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x91}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK={0x6c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xafe9}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x220717c3}]}, @TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0x80, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}]}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8c990000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x800}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7fff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7fff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x800}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7fffffff}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x84, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5d9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x456}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0xb8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x278}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7cb4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc994}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe11}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x40000}, 0x4000014) 19:58:25 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 19:58:25 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffffffff, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x7f, 0x1f, 0x5, 0x3a, 0x0, 0x69fa, 0x4112, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0xf1cef24959881d4a, @perf_config_ext={0x4, 0xd9}, 0x990, 0x0, 0x9, 0x0, 0x10000, 0x1}, r1, 0xb, r0, 0x0) r2 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x4600, &(0x7f0000000040)={0x0, 0x7}) r3 = socket(0x10, 0x0, 0x0) write(r3, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140)='NLBL_UNLBL\x00') r4 = accept4$inet(r3, &(0x7f0000000400)={0x2, 0x0, @loopback}, &(0x7f0000000440)=0x10, 0x180000) r5 = socket(0x10, 0x0, 0x0) write(r5, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x20d29ee665dd63f1, 0x10, r5, 0xce283000) r6 = openat(0xffffffffffffffff, &(0x7f0000000480)='./file0\x00', 0x10000, 0x2) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000004c0)=r6, 0x4) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(0x0, 0x2, &(0x7f0000000700)=[&(0x7f00000005c0)={0x0, 0x0, 0x0, 0x3, 0x7, 0xffffffffffffffff, &(0x7f0000000540)="69ce45769e67190c85c96943146db2745da071f3d50ba95f7b8c75f9e9b5569ea3406bb450b63d4fc3a830ab17b9161ba147023b1821623fe3994886510a0ca7fb05af2a54b7bffab12ba9c87843", 0x4e, 0x7fff, 0x0, 0x1, r7}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x7f, 0xffffffffffffffff, &(0x7f0000000600)="8c4dfa85a1edce9973dfae2eb4b24cf0ed42989deaa9ba850dc82408c4c2ea000e03060fa44e746f7740705e1935b40569fa5ae1c0444adff1ca189171a4e926e8e4aed65f0af9c6c39f8ec2885e9fcebb20d0c4fde506bf362814f91e2eb82aeb88af510d8d7c723f0fe85a505123caeb61c014f1e165b35aea49edc07c3ed5d91876425279fc221ea5d7dcb753c5", 0x8f, 0x2}]) sched_getattr(r1, &(0x7f0000000500)={0x38}, 0x38, 0x0) ioctl$UI_SET_SWBIT(r8, 0x4004556d, 0x10) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYBLOB="240000000206010200000000000000000100000505000500050000000500010007000000e95c1bc2a386195da7c44b89def81a6adfc74cb70ac673ae23df501010218beffb6684"], 0x24}, 0x1, 0x0, 0x0, 0x4044090}, 0x4040) 19:58:25 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x0, 0x8, 0x5}) [ 727.550036][T22905] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 727.582213][T22905] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 19:58:26 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 19:58:26 executing program 4: syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040)='NLBL_CALIPSO\x00') unshare(0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) sendmsg$AUDIT_SET(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x3e9, 0x63ee8c5d98af5e2, 0x70bd28, 0x25dfdbfc, {0x0, 0x1, 0x0, 0xffffffffffffffff, 0x1, 0x76, 0x1, 0x7, 0x0, 0x800}, ["", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000000) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="080000000806010200000000000000000000000005000100070000001b7d8e910fc55d4fee4efe58abdbe16eaa3ba3633a32359af2182613ea699ab0cfdad8ec59671ef7db396bf69971f4e08222b5f06e267ebd07975b58197d174bb5d4f9443cfb56483d9eac40062b2be3af203e30ba44e7352e5ad415dc42711bf9ab6e3e845926638971807e2a6eb7f6b3c52e29582ee3b5e9676ef56137f6bdf3f3"], 0x1c}}, 0x0) r2 = socket(0x10, 0x0, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) sendmsg$IPSET_CMD_PROTOCOL(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000000106010100000000000000000100000305000140070000000593b4000700000005000100b474e62f860e8e0d7dac9958529a7207006c37aa4160eac083564b0000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x80) 19:58:26 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000040)={0x2}) 19:58:26 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) ptrace$peeksig(0x4209, r0, &(0x7f0000000080)={0x8000, 0x1, 0x3}, &(0x7f00000000c0)=[{}, {}, {}]) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x4600, &(0x7f0000000040)={0x0, 0x7}) 19:58:26 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffffffff, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x7f, 0x1f, 0x5, 0x3a, 0x0, 0x69fa, 0x4112, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0xf1cef24959881d4a, @perf_config_ext={0x4, 0xd9}, 0x990, 0x0, 0x9, 0x0, 0x10000, 0x1}, r1, 0xb, r0, 0x0) r2 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x4600, &(0x7f0000000040)={0x0, 0x7}) r3 = socket(0x10, 0x0, 0x0) write(r3, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140)='NLBL_UNLBL\x00') r4 = accept4$inet(r3, &(0x7f0000000400)={0x2, 0x0, @loopback}, &(0x7f0000000440)=0x10, 0x180000) r5 = socket(0x10, 0x0, 0x0) write(r5, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x20d29ee665dd63f1, 0x10, r5, 0xce283000) r6 = openat(0xffffffffffffffff, &(0x7f0000000480)='./file0\x00', 0x10000, 0x2) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000004c0)=r6, 0x4) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(0x0, 0x2, &(0x7f0000000700)=[&(0x7f00000005c0)={0x0, 0x0, 0x0, 0x3, 0x7, 0xffffffffffffffff, &(0x7f0000000540)="69ce45769e67190c85c96943146db2745da071f3d50ba95f7b8c75f9e9b5569ea3406bb450b63d4fc3a830ab17b9161ba147023b1821623fe3994886510a0ca7fb05af2a54b7bffab12ba9c87843", 0x4e, 0x7fff, 0x0, 0x1, r7}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x7f, 0xffffffffffffffff, &(0x7f0000000600)="8c4dfa85a1edce9973dfae2eb4b24cf0ed42989deaa9ba850dc82408c4c2ea000e03060fa44e746f7740705e1935b40569fa5ae1c0444adff1ca189171a4e926e8e4aed65f0af9c6c39f8ec2885e9fcebb20d0c4fde506bf362814f91e2eb82aeb88af510d8d7c723f0fe85a505123caeb61c014f1e165b35aea49edc07c3ed5d91876425279fc221ea5d7dcb753c5", 0x8f, 0x2}]) sched_getattr(r1, &(0x7f0000000500)={0x38}, 0x38, 0x0) ioctl$UI_SET_SWBIT(r8, 0x4004556d, 0x10) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYBLOB="240000000206010200000000000000000100000505000500050000000500010007000000e95c1bc2a386195da7c44b89def81a6adfc74cb70ac673ae23df501010218beffb6684"], 0x24}, 0x1, 0x0, 0x0, 0x4044090}, 0x4040) 19:58:26 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x0, 0x10, 0x5}) 19:58:26 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffffffff, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x7f, 0x1f, 0x5, 0x3a, 0x0, 0x69fa, 0x4112, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0xf1cef24959881d4a, @perf_config_ext={0x4, 0xd9}, 0x990, 0x0, 0x9, 0x0, 0x10000, 0x1}, r1, 0xb, r0, 0x0) r2 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x4600, &(0x7f0000000040)={0x0, 0x7}) r3 = socket(0x10, 0x0, 0x0) write(r3, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140)='NLBL_UNLBL\x00') r4 = accept4$inet(r3, &(0x7f0000000400)={0x2, 0x0, @loopback}, &(0x7f0000000440)=0x10, 0x180000) r5 = socket(0x10, 0x0, 0x0) write(r5, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x20d29ee665dd63f1, 0x10, r5, 0xce283000) r6 = openat(0xffffffffffffffff, &(0x7f0000000480)='./file0\x00', 0x10000, 0x2) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000004c0)=r6, 0x4) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(0x0, 0x2, &(0x7f0000000700)=[&(0x7f00000005c0)={0x0, 0x0, 0x0, 0x3, 0x7, 0xffffffffffffffff, &(0x7f0000000540)="69ce45769e67190c85c96943146db2745da071f3d50ba95f7b8c75f9e9b5569ea3406bb450b63d4fc3a830ab17b9161ba147023b1821623fe3994886510a0ca7fb05af2a54b7bffab12ba9c87843", 0x4e, 0x7fff, 0x0, 0x1, r7}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x7f, 0xffffffffffffffff, &(0x7f0000000600)="8c4dfa85a1edce9973dfae2eb4b24cf0ed42989deaa9ba850dc82408c4c2ea000e03060fa44e746f7740705e1935b40569fa5ae1c0444adff1ca189171a4e926e8e4aed65f0af9c6c39f8ec2885e9fcebb20d0c4fde506bf362814f91e2eb82aeb88af510d8d7c723f0fe85a505123caeb61c014f1e165b35aea49edc07c3ed5d91876425279fc221ea5d7dcb753c5", 0x8f, 0x2}]) sched_getattr(r1, &(0x7f0000000500)={0x38}, 0x38, 0x0) ioctl$UI_SET_SWBIT(r8, 0x4004556d, 0x10) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYBLOB="240000000206010200000000000000000100000505000500050000000500010007000000e95c1bc2a386195da7c44b89def81a6adfc74cb70ac673ae23df501010218beffb6684"], 0x24}, 0x1, 0x0, 0x0, 0x4044090}, 0x4040) 19:58:26 executing program 3: mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 19:58:26 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000040)={0x3}) 19:58:26 executing program 3: mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 19:58:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507800000000000000000e2ff00", @ANYBLOB="e1974c9fef494d5b84744bc26a5a2f6ed5554fce828df231581888e7f399a074305fd11630300c6ffba0cf0d19", @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="880000002c00270d00"/20, @ANYRES32=r2, @ANYBLOB="0000d30000000000080000000a000100726f7574650000005800020054000600500001000b0001"], 0x88}}, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) 19:58:26 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x0, 0x7, 0x2}) 19:58:26 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)={0x24, r4, 0x201, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r4, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80000000}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x810) socket$caif_seqpacket(0x25, 0x5, 0x1) getpid() r5 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r5, 0x4600, &(0x7f0000000040)={0x0, 0x7}) 19:58:26 executing program 4: prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffc000/0x3000)=nil) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$hiddev(&(0x7f00000015c0)='/dev/usb/hiddev#\x00', 0x1000, 0x800) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x9, 0x3, 0x3e0, 0x128, 0xffffffff, 0xffffffff, 0x128, 0xffffffff, 0x128, 0xffffffff, 0xffffffff, 0x368, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00'}}, {{@ipv6={@remote, @private2, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0x1e0, 0x240, 0x0, {}, [@common=@rt={{0x138, 'rt\x00'}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @rand_addr=' \x01\x00', @remote, @private1, @private1, @private0, @private0, @ipv4={[], [], @multicast2}, @dev, @local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private2, @ipv4={[], [], @local}, @rand_addr=' \x01\x00', @local, @remote]}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@ipv4={[], [], @local}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x6, 0x21, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4081, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f00000004c0)='./file0\x00', 0x101000, 0x24) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000040)={'macvlan1\x00'}) r2 = syz_open_dev$vcsn(&(0x7f0000001600)='/dev/vcs#\x00', 0x6, 0x44300) r3 = signalfd4(r2, &(0x7f0000000540)={[0x9e]}, 0x8, 0x0) write$UHID_INPUT(r3, &(0x7f0000000580)={0x8, {"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", 0x1000}}, 0x1006) unshare(0x60000000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x42df58543c8380db}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_FWMARK={0x8, 0x4, 0x200c0}]]}}}]}, 0x38}}, 0x0) [ 728.602497][T22944] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. [ 728.648999][T22949] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. [ 728.727798][T22951] IPVS: ftp: loaded support on port[0] = 21 19:58:27 executing program 0: r0 = socket(0x10, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x4, 0x1, 0x9, 0x7, 0x8, @remote, @mcast2, 0x8, 0x1, 0x7368}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() getpeername$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, &(0x7f00000000c0)=0x10) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000140)=0x1c0d, 0x4) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x4600, &(0x7f0000000040)={0x0, 0x7}) 19:58:27 executing program 3: mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 19:58:27 executing program 5: clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setuid(0xee01) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000200)=""/209) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dlm_plock\x00', 0x149002, 0x0) r0 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000001100)={0x0, 0x0, "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", "17fd839273a6812cf34cb9468ca7a40d5401914c609c1311bd36dc0798d0a59701b14a284cc91a8611f1f8ee683a68a16cd3d809ca579637dd94393e89e42d37ec4c34038c3b40bb56da3706f85dc3ec195425d34df76cc2c7c980c17c6b2dcb1e5589b6678eb717db0016a0e7363badd2dcdde5d8ded927add5f5d978844dd8c18cd768631befac6b0c624505fc975a8e404607948b969586aed3d2bc72a3580642968a5c46d4eeedc88c1ec858be94df2184b851ceaee1ed6fde8178506e173598e1133fce33311806989234b4145c65265c586d7c2833437a4b87c3e6f0c0fd09f92b944864b1c997b108ccdb912d579ce583138522642c4c9dcc569a0000a997bac6e90dc16045e95da5337e0ce257ba15eff9291faf539e950ba08c9806b5038cf1fee9035b4083256bf4b32f8ded7a6b0b23fbfac13af66bcaec9d8833ad5b990fcc0625e6c55b78d27c77f952c1980b0eaaa7fe872796c80bda56bdcf95f4d11236a9b32800e3d10fa24c8a6a0ce7ea493b227db3e36098b180b92b41774d53bc815e00d90ae94eba2aabcf623822e4587aeda483f17e58d24f6ea9b2fbc897b341203c54cfb34304475dfd5511dd60f6d1b8bb9d2279933b14931eae0023f8c9b5789855046cc905428f475c0248907e51ae079738710f74c1e010ba531d53d4eb350ead371c591a9b993f6f0c35cdee137d53ee5f0021b3a9dc8d02837375eb986991b378e3edb46f8791e781428646f071c5a253f97f8c28a6909b6d480bffc0c64575cfc40a89c0ba5127edcc1fc8cb7e132ae9ac09e4613b6497ecc26f9644f52ace6debbd4a5f2de64b8e7b22357daba73934b2dd07c980cf1050442b7eb52bd3f2d4e0dd54b37f6412d0264132af49bb705eddeb6adf48e48b1b5610371355a88ea5db4f00ebe95a981550571d141895dd6d4327d89f57e2bbaf6d267193bba9fb5d28845030125ac207209ce4abade2041e4f75c07074281caa9b94c78489d0979d39197b724f41f18ade09d0a88fa0462af94541898f6708e9dab1f399405a72a49ab61471583a9ffb9925e76082ca955b0bee158d3ff246b1a2bf2a35e86c41b6eb1fe90c68706d24072cc7ba464b7e2357656605de9fc67f6256c61524a3dda8eb8cb4413d02f5c1c9a0797be8fa88ef1a4bcd70b17b4e30e6f8b410302fdcc19ab4d5c0f269bc33d145831b6659571a0ab814e4602d8fe249420b423e0bed2292571085d66326cb653324a7d5db27906aec7ee14b8519165d17401cb2a4fbf38449e01d0fd5d105866133320d16e28510a63c9d731c08f3ae5f242439ff5b39e616a44f98aaa454bb7cd0189143d09126335fa6ede1efb7d933d38e5ed6e3e8ef5f170cfbde350395e4cfe9023cb3f735ea9a349d91b83fde9b8a2ea868aa2f78b46fec58f2a02bce322ce13ec44cf0fc6d06821a0b3668924c66079cd79a489f1035738b940324129991e3f1858fbb4927337d2b1771911cd1e13f539b4feaec5ca7f54c3ba10f10e0a7751cbcdb4fb8604d9452f75613149e8caf8a9631a44935e767b0208884fdd50c32641e8fdde34e5eb14ef5ec2fa8bdddedac19d23a08bf289c7548aed1698f337d08e15fe7a21e7fb71571d06fd764f4ebed4aaaec9af3ac38327272e63625e3bf30dd8ea7fd69aa1b82a6c293751da5285ddc84cd435b056983beab8315e3dccfcb73330d16ede0251fa9fae8803931fcec8317b16f7be6de0b00b216f90ce21c49ce35c0d35a3e5ff186f98b13ccf8249190e18e4736d6848f35a60896fcafa2c486d6ee575053c7cf14a20d513fc6e78a392174754c9d19dddd13570477f814eaa0f6eabd5f80a99ba73e9eb8da1d1ab38823c9d5c59982bf1ca14f9aec7970df99c6492f2ee6375d55247bc10379e7d08f607606ccd1a6cff1f2ef38fcfe0f7a1ff13c935fc32659f6d22a44280bf49fa6d57afccd5ac622bc1af45c707723382b3c29a06ec4063b3bc711272fa55720e68a4b73565fbcba0b339a1050e0dce5753ac53768645db481a358deeb3614ef0d9e285cd3299d853eda94d9f8380c81b4f68e86573f669612a1f4c621261bdab895c5652773b68846745f1ca4e106d81314819ded5c31632416102d3a2895c144c2ba09b3774d35c38c80ed46ff053b7416f23583d44aa197295468ba20e9a21fc0bd04fca0eb7173695d892258582b5bca48a8d5f38afacd94ec8ad80556ebcd88e549d46c7b88d0aad38387c32056668059b470fa3714785b80ea241b21d989c93ffd9f1b3e2afe80f3aeede5b8ab1c805de30c4febb20559853c9f039be61467904cc9d24ebb5d1ae4c3d50bfc7a2e611fa22f4b86dd934d36c53dafcabf8815298647641141dd4bd8f1cea4c113fc3642abc1eab1b4101e47399dff6a73171a83fa1fcf147e3c05a12dea1d9b327eea8277ba857893726e8352b6e5e52553efff4eaef3b4ae45e40b84f99f2ffc3a9f38e4e4df882859b54bc41090ce5182ffae754a268fa4d60a4c3511f9587250ecbf23b4cffaf4f756019d936e5ce1bf42594d3bed58084c1b3e38448aec5cd52dd7aae422bf956b5ce997bb1f44db420c3ac38fb4ff8bade38ef86cf54e25208e5c4088345d02815cbda07bac55b138f5c7908af4896dba80f27c9ac7dfa8b07721905066ea53cd0bd23274d570f1cd90f5a980252dc8c65c5efc34b4ed3bddff25f0cd726df5f9fbd2bee1efbe849ef837e43cb20aa27fe2e7233eae8e6485d145576c7fc26666590cdc6bb6745174733c0f7c68b9a3a700574338ac79896454ade2be46290b506749c939dfbd4107f9e650d281a734ad66caf3cada1e11627d8f6d12b42ef076560c3a2a50bf168785138e44a199935bf4c69ca4ed76448b473716d9a8db10482ee9376c25e965117948924c525438ce8c2ffad69ff011d84ec8b08ca1846baa41e1605f5f65a4f29b92fe1d9baa0509cb798e79c1f757f0c4aa2720c01823a1bd11c82101b693e7da980fb7d669208e024a04a081e7cac72b2a4b64d49520960ee8ad9c8369ff686d7c1d303cd85ebc2a95f48acc00cbbc1539cb9d0b20fa5db2e637028b9fbbc4c249fa5c49fa3ea0cd7f5a8201462404f7aca7de74c682feffcd0c3f6088182dc4cee572aba9c0e75907f9c1236191d1d156495f681bbffd2c3cf647d3938ef1f5a076b40c018625352a1fd43559eca3279c169b585f3a81e42c08a29599a6268b04d7d223f60c3b4e48dbdfec64bc4cca30d579f655aab2a32e639b0e608d5e0f4257e6ee261816ea5cd3550758674f93f00217c5e5c7a751dee6e0bcc54401d79c76a44150c94fb5c6daff8e5c9f442a8077dda6c304bb558f891e481379579e39f44eaf65ee2eeef322c27973077fa7fe4cdeb1ca617790a0dd73fd62a70c21786539bcdde23cd5472d3788df3f2c3f18613ff0d144baa6c25014cfa843d7f6d9c87f9c97ceddebab532c50b0c0492103d12eb94c7c9b5d6efa06d8b27e1acc87379c67e18103f17b68d31e0839904e541f4c5dff76ccb98c7bcf31142f22c77bd76f8c30e11b5c2971aa350f708d17e56ee92202fb82f8f40b0e93baf7e4da0bd8c8a6fbde1d68086ab631f91e776ce27156958a5d65472bb391543dd82f88daad3e3399fdaa09e766101598c5e10cf1019d10f9767f60b495b31349606136e4c284bff9932e7144a8c0fecd27c29045af2bd331c71f5bf0f02bbfa4e42458b8c418773a1ff982f13377948c9ec18eb5139c29c0ae1d17266047abdf8580c73a4b9f33ea99eda78b767d630e3af6d4d20507bd2788241d36a68d9c2dd1dbbe3e36fceaf5db1034343c120b269807811ef98997c0388ceeb4cd55e3e4989ae130baa798dada7fe5610e7beda279a94518ec0b3188788fec9f18eb3d1d71a70d6c845b24bbbca161ae1748d0fcd0455b9219e38f868e9402932bfd49f0d433d71142b7e461a2c80152760d55b8beef9082ea4c8f29fadeeb7447cb3f4a27e34651551d005571b76d41ecd7f3e50ea986d1391559f29729e7ff2e39a3a48abb8283a60e9f971faca97f89cb0dffed87fd4c7f1ae3f97a785a79e73d59a5f4b2c66817d322df6d166736d0dd8f7bf1ae552d32bb6e21ecc327e58d42d822ebae04e69c01c341d69879eb7c689f132f1870ca521085fa91ebcb8d6b3342a70f12924b76475786773eeaf83535e93c72fb5b351cdcc0efb1309fbd538426857e3741766ca9ee85ef2780107647c9ea633f982e0e6c72f9516b1fc2d40bde95ae9b22aa51a9e913c44ed71ad6a1ca7d4ab1bf6eac752d69766264b2c2e7f013d4c71e2311b57a5e647a3f55bf7cad0939f536a840fc0361fc0037fc584ebfd3d28b77c81e512e102ceb5a534866d478db7637669db21c76212b44e8101eeb2207d5255e40c5463a0df35358aa63481432a1a1f16cc9119a1a18a0b58e1c8505e4c892d5152615c216e380c5301937781c609537bfac5d8045b4411bc8241a67ab7988026b65556bcbf5aa8df5a3db9e03f79f0683adfb3ac1374c0f9f8fb1ff7465fd334e110918290330744e6a006969a057427649791fa6d32edb23f5d9cd60cbb41f4e9317dfe83321d335e811c5470dec541396699da2074ee05822264e6a2b7ae3cd42570ce6f9f69640381a198b836d28b20fd17138e2847da773cf9c5808eff66a976b0879aa97a0c5ce0d881b56e518aca876b3ea522e0caaa36045a41a25f150d8d6dee0e261467846f1397d17a464d350daa6a0198a733e8684461fe8e3bcc1c26ed81882d95c31e01abc6762673e41d04cd4ce10877e56f3531c4709b3e3a8512ab3631b6b17c3e3d444f4754a7c22a44f10a00258c79070635f5b63b2ea55bf02cf37b2f62df2bb0a2811314bc218c558ec95b2f4d8c79947655a867b451423441ae66bb6d6daac8f9e8671b27c4e320b8490837c17b1a70ff41c30086f159829e6350e0afeb8b370ca7cb5f9e6dbbdb403a21019af150e0afd734cf38956d6d740361cf2ca48f7355667dbf5ccf4533de9f7b28762c982e0292b1ecee36f0a9548af23dabab291af4298b33e0bd22a861c381868eb25eb538cbf5ccc51c19b2e65db6a63a553748dc4853d49345ec3d2284a00a5365157dc9fd4a0c2f60dbd649ff5773361150903cef7df568f31ee2be43a7c359c4321f4ef84868679f4bc2eb04e0e6547fb03fd8d127eb2f3e0acb227b39b18c36682b7a7cf6c3d68ce50b47cfbfb55a12e65e83fd593c94f9d713623fa7c9b074cdede11fe368f8c885fff65e0e90b9f3c10ae7907fb77e70e25bd5e32872044f25fb173661947c7a364f422681148ad31e9202c55b268c81b73186f9b7729d223d31b1c4405b8654c302980f84c9e0f52f1ac0ef51252773651109877832b925afaf7a9bc640e44defd6b66ec2726"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f00000003c0)={{r1, 0x0, 0x30000000000, 0x80, 0x8, 0x800, 0x6c67, 0x1, 0xb1b4, 0x1, 0x80000001, 0x9, 0x101, 0xff, 0x76}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @multicast1}, &(0x7f0000000380)=0x10) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000040)=[{&(0x7f0000000640)="8a", 0xb500}], 0x1, 0x0) fchmodat(r0, &(0x7f0000000480)='./bus\x00', 0x1e) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) umount2(0x0, 0x0) 19:58:27 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x0, 0x7, 0x3}) 19:58:27 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 19:58:27 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_TMR_METRONOME(0xffffffffffffffff, 0x40045407) ioctl$SNDCTL_TMR_CONTINUE(0xffffffffffffffff, 0x5404) getpid() r0 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f0000000300)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x6a}) ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000440)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @mcast1, @loopback}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f00000010c0)=ANY=[@ANYRES64=r4, @ANYBLOB="040000000000000000000000000000003d0400000000000001000007000000000000004000000000000000000000000000000000000000000000000800000000000000000000000000000002000200000000000800000000000000008000000000000000000000000000000000000000b0183ba27c02a1a2ddb8ae"]) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000000c0)={0x0, r4, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000000180)={r4, 0x349}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f00000000c0)={{r4, 0x4, 0x8, 0x6fee, 0x5, 0x40, 0x7fffffff, 0x3, 0x2, 0x0, 0x2, 0x7fffffff, 0x9bc000000, 0x6, 0x7}, 0x40, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) r5 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r5, 0x4600, &(0x7f0000000040)={0x0, 0x7}) 19:58:28 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000040)={0x5}) 19:58:28 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socket$nl_route(0x10, 0x3, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x70, 0x8, 0x4, 0xfb, 0x7, 0x0, 0x1, 0x4000, 0x1f, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6f1e, 0x0, @perf_bp={&(0x7f0000000180), 0x4}, 0x18000, 0x200, 0x3, 0x0, 0x0, 0x8704, 0x3}, 0xffffffffffffffff, 0x5, r0, 0x0) r4 = socket(0x10, 0x0, 0x0) write(r4, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) setsockopt$inet_tcp_int(r4, 0x6, 0x10, &(0x7f0000000340)=0x100, 0x4) r5 = syz_io_uring_complete(r2) sendmsg$IPSET_CMD_HEADER(r5, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2280040}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000000c06010807d1f17b2940bb04000000000000000000050001000700"/40], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x4040881) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x104181, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000380)=0x404100000001, 0xfe3f) syz_open_dev$vcsu(&(0x7f0000000200)='/dev/vcsu#\x00', 0x3, 0x113000) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000440), 0x132441) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) 19:58:28 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x0, 0x7, 0x6}) 19:58:28 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000100)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @dev={0xac, 0x14, 0x14, 0x2d}}, "ec0e24730f7083d3"}}}}}, 0x0) 19:58:28 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 19:58:28 executing program 0: perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x40, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40, 0x8, 0x0, 0x0, 0xfffe}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x4600, &(0x7f0000000040)={0x0, 0x7}) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000100)={0x8, 0x7, 0x5, 0x4, 0x9fa}) 19:58:28 executing program 5: r0 = socket$inet6(0xa, 0x80801, 0x8210) close(r0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180), 0x8) readahead(r0, 0x80000002, 0x40000000000002) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x12) preadv(r2, &(0x7f0000000340)=[{&(0x7f00000004c0)=""/180, 0xb4}, {&(0x7f00000007c0)=""/186, 0xba}, {&(0x7f0000000700)=""/178, 0xb2}, {&(0x7f0000000a40)=""/223, 0xdf}, {&(0x7f0000000b40)=""/178, 0xb2}], 0x5, 0x5, 0xffff8000) socket$unix(0x1, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000001780)) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x20000800}, 0x48000) io_getevents(0x0, 0x3ff, 0x0, &(0x7f00000002c0), &(0x7f00000001c0)) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f6, &(0x7f0000000580)="3bbc310000ea5fb04286d3c42882bca929b66e50ff58bc573a8ebf377fbd8222a01104008a568ca16980028a953f992634e0e1ed0ec2f12b99a9f7445dc3044444d347f685a4479fb3821750635edd555782fd4a674ad84cb243387990948f7b2505f027f002aa42a6f092b3548217d061b73c19b01249d90a9d7b00"/139) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) modify_ldt$read_default(0x2, &(0x7f0000000100)=""/14, 0xe) ioctl$USBDEVFS_REAPURBNDELAY(r3, 0x4008550d, &(0x7f0000000440)) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x58, 0x10, 0x705, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x442d, 0x40008}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_REPLAY_PROTECT={0x5, 0xc, 0x1}, @IFLA_MACSEC_WINDOW={0x8, 0x5, 0x80000000}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 19:58:28 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x0, 0x7, 0x8}) 19:58:28 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 19:58:28 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socket$nl_route(0x10, 0x3, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x70, 0x8, 0x4, 0xfb, 0x7, 0x0, 0x1, 0x4000, 0x1f, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6f1e, 0x0, @perf_bp={&(0x7f0000000180), 0x4}, 0x18000, 0x200, 0x3, 0x0, 0x0, 0x8704, 0x3}, 0xffffffffffffffff, 0x5, r0, 0x0) r4 = socket(0x10, 0x0, 0x0) write(r4, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) setsockopt$inet_tcp_int(r4, 0x6, 0x10, &(0x7f0000000340)=0x100, 0x4) r5 = syz_io_uring_complete(r2) sendmsg$IPSET_CMD_HEADER(r5, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2280040}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000000c06010807d1f17b2940bb04000000000000000000050001000700"/40], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x4040881) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x104181, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000380)=0x404100000001, 0xfe3f) syz_open_dev$vcsu(&(0x7f0000000200)='/dev/vcsu#\x00', 0x3, 0x113000) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000440), 0x132441) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 730.076116][T23030] netlink: 'syz-executor.5': attribute type 5 has an invalid length. 19:58:28 executing program 0: write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x21, 0x1}, 0x7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x4600, &(0x7f0000000040)={0x0, 0x7}) [ 730.197625][T23035] netlink: 'syz-executor.5': attribute type 5 has an invalid length. 19:58:28 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x0, 0x7, 0x10}) 19:58:29 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000040)={0x6}) 19:58:29 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 19:58:29 executing program 5: ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, &(0x7f0000000280)={0x1, 0xffffffff, 0x0, 0x3, 0x1, 0x3}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x2000001}, 0x20000010) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000002c0)=ANY=[@ANYBLOB="000065dbfb23e23fbc8a14ffea10037ea8de457c559cc9b44060f9a13b2530e4d4db255d238307ef5dd3d0080d48aecb2c6f9bad69df20c5a9236127fe9dae752923f6122534a79b4fe1ee1ee0ddab33388ccdcd84038120d36c9be72e91d2b3344c20bd8999048a0214866c67ec00f59393acdf46e8"], 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000180)={0x0, 0x0, 0x20}, 0xc) dup3(r1, r0, 0x0) syz_open_dev$audion(0x0, 0x10001, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100), 0xc) ftruncate(r3, 0x600004) sendfile(r0, r3, 0x0, 0x80001d00c0d0) r4 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) 19:58:29 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r1, 0x0, 0x30000c) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x101802, 0x0) r3 = dup(r2) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x0, 0x0) r4 = dup(r3) sendfile(r3, r4, 0x0, 0x0) recvmsg$can_raw(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/118, 0x76}], 0x1, &(0x7f0000000180)=""/103, 0x67}, 0x40010100) 19:58:29 executing program 0: getpid() openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x341400, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x4600, &(0x7f0000000080)={0x200000400000000, 0x6, 0x4000008000}) 19:58:29 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x80101, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x9, 0x8, 0x5, 0x7, 0x0, 0xfffffffffffffffa, 0x2100, 0x8, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3ff, 0x0, @perf_config_ext={0x400, 0x8f}, 0x10000, 0x0, 0x5, 0x7, 0xffffffffffffb124, 0x4, 0x9}, 0x0, 0x2, r0, 0xb) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000040)={0x0, 0x7, 0x5}) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000140)=[{0x2, 0x0, [0x5, 0x9, 0x4, 0x2, 0x3e8, 0x2, 0x6, 0x9317, 0x101, 0x7, 0x401, 0xfffffff7, 0x3, 0xfffffd55, 0x7, 0x4]}, {0xc, 0x0, [0x200, 0x3ff, 0x1, 0x9, 0x0, 0x8, 0x7, 0x4, 0x5a6, 0x400, 0x0, 0x5, 0x0, 0x101, 0x0, 0x8]}, {0x6, 0x0, [0x1000, 0x800, 0x1, 0x8b3c, 0x7f, 0x3f9, 0xa294, 0x1, 0x1f, 0x2, 0x7f, 0x8, 0x3, 0xfffffff7, 0x79a, 0x5]}, {0x10, 0x0, [0x9, 0x80000001, 0x9, 0xa7, 0x22, 0x6, 0x80000000, 0x5, 0x1ff, 0xffffab0d, 0x987, 0xdc, 0x0, 0x3, 0x0, 0x98]}, {0x3c, 0x0, [0x6, 0x2, 0x80, 0x5, 0x3ff, 0x20, 0x4, 0x4b1, 0x80000000, 0x8, 0x6, 0x5, 0x8, 0x932, 0x3]}, {0xc601231bc101a959, 0x0, [0x0, 0x8000, 0x10001, 0x8, 0x0, 0x900, 0x7, 0x39ef, 0x6, 0x5, 0x101, 0xfffffffa, 0x4, 0x7fff, 0x30000, 0x8001]}, {0x1, 0x0, [0x3, 0x9, 0x6, 0x3ff, 0x3, 0x6, 0x0, 0x0, 0x96d, 0x0, 0x0, 0x9, 0x5, 0x9, 0x0, 0xffffff7f]}, {0x1a, 0x0, [0x8, 0x1f, 0x2, 0x100, 0x8, 0x0, 0x81, 0x4, 0x7, 0x8, 0xffff, 0x7, 0x86, 0x3, 0x100, 0x9]}, {0x10, 0x0, [0x8, 0x4, 0x9, 0x3f, 0x9, 0x800, 0x6, 0x7fff, 0x101, 0x9, 0x3, 0xffff, 0x8, 0x1, 0xe7de, 0x6]}], 0xffffffffffffffff, 0x1, 0x1, 0x288}}, 0x20) write$binfmt_aout(r1, &(0x7f0000000440)={{0x108, 0x8, 0x1, 0x303, 0x2de, 0xffffffff, 0x1ae, 0x9}, "2ab1e4ed84ec4a8555f6f492c66f8d814e44d2a7f589070a308ddc4940220926c18a516e1d93a812cc20ab1bbfcd0363", [[], [], [], [], []]}, 0x550) 19:58:29 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r1, 0x0, 0x30000c) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x101802, 0x0) r3 = dup(r2) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x0, 0x0) r4 = dup(r3) sendfile(r3, r4, 0x0, 0x0) recvmsg$can_raw(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/118, 0x76}], 0x1, &(0x7f0000000180)=""/103, 0x67}, 0x40010100) 19:58:29 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 19:58:29 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x4600, &(0x7f0000000040)={0x0, 0x7}) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000080)={'ah\x00'}, &(0x7f00000000c0)=0x1e) 19:58:29 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r1, 0x0, 0x30000c) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x101802, 0x0) r3 = dup(r2) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x0, 0x0) r4 = dup(r3) sendfile(r3, r4, 0x0, 0x0) recvmsg$can_raw(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/118, 0x76}], 0x1, &(0x7f0000000180)=""/103, 0x67}, 0x40010100) 19:58:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x0, 0x7, 0x5}) ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, &(0x7f0000000080)={0xfe3, "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"}) 19:58:30 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 19:58:30 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000040)={0x8}) 19:58:30 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000080)) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x4600, &(0x7f0000000040)={0x0, 0x7}) 19:58:30 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r1, 0x0, 0x30000c) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x101802, 0x0) r3 = dup(r2) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x0, 0x0) r4 = dup(r3) sendfile(r3, r4, 0x0, 0x0) recvmsg$can_raw(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/118, 0x76}], 0x1, &(0x7f0000000180)=""/103, 0x67}, 0x40010100) 19:58:30 executing program 5: r0 = socket(0x10, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0), 0x4) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000440)) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x92200, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000240), 0x4) bind(r2, &(0x7f0000000380)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:58:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xfffffffffffffff9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x0, 0x7, 0x5}) execve(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240), &(0x7f0000000340)=[&(0x7f00000002c0)='#\x00', &(0x7f0000000300)=':}-@+)[#[)\'%+,]\x00']) ioctl$VHOST_SET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af13, &(0x7f0000000080)={0x2, 0x4}) ioctl$FBIOBLANK(r0, 0x4611, 0x2) 19:58:30 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 19:58:30 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r1, 0x0, 0x30000c) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x101802, 0x0) r3 = dup(r2) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x0, 0x0) r4 = dup(r3) recvmsg$can_raw(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/118, 0x76}], 0x1, &(0x7f0000000180)=""/103, 0x67}, 0x40010100) [ 732.309755][T23098] IPVS: ftp: loaded support on port[0] = 21 19:58:30 executing program 1: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x8) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000100), 0x3}, 0x0, 0x1ff, 0xffffffff, 0x3, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r2 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00'}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, &(0x7f0000000040)={0x0, 0x7, 0x5}) 19:58:30 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r1, 0x0, 0x30000c) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x101802, 0x0) dup(r2) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/118, 0x76}], 0x1, &(0x7f0000000180)=""/103, 0x67}, 0x40010100) 19:58:30 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 19:58:30 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000080)={'nat\x00'}, &(0x7f0000000100)=0x54) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x4600, &(0x7f0000000040)={0x0, 0x7}) 19:58:31 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r1, 0x0, 0x30000c) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x101802, 0x0) dup(r2) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/118, 0x76}], 0x1, &(0x7f0000000180)=""/103, 0x67}, 0x40010100) [ 733.221866][T23098] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 733.250255][T23105] IPVS: ftp: loaded support on port[0] = 21 19:58:32 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 19:58:32 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000040)={0x10}) 19:58:32 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r1, 0x0, 0x30000c) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x101802, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/118, 0x76}], 0x1, &(0x7f0000000180)=""/103, 0x67}, 0x40010100) 19:58:32 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$FIOCLEX(r1, 0x5451) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x4600, &(0x7f0000000040)={0x0, 0x7}) 19:58:32 executing program 1: syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x979, 0x408441) r0 = socket(0x10, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f00000000c0)=ANY=[@ANYBLOB="670a01080000000020010000000000000000000000000000000000000000000000fffffffffffffe80000000000000000000000000002720010000000000000000000000000002fe80000000000000000000000000003b"], 0x58) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000040)={0x0, 0x7, 0x5}) 19:58:32 executing program 5: r0 = socket(0x10, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0), 0x4) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000440)) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x92200, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000240), 0x4) bind(r2, &(0x7f0000000380)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:58:32 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r1, 0x0, 0x30000c) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/118, 0x76}], 0x1, &(0x7f0000000180)=""/103, 0x67}, 0x40010100) [ 733.934152][T23189] IPVS: ftp: loaded support on port[0] = 21 19:58:32 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 19:58:32 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r1, 0x0, 0x30000c) wait4(0x0, 0x0, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/118, 0x76}], 0x1, &(0x7f0000000180)=""/103, 0x67}, 0x40010100) 19:58:32 executing program 1: perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xfb}, 0x1000, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x0, 0x7, 0x5}) 19:58:32 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f00000000c0)={0x3, 0x5, 0x7fff, 0x9, 0xcf7, 0x9, 0x3}) getpid() r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x4600, &(0x7f0000000040)={0x0, 0x7}) 19:58:32 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r1, 0x0, 0x30000c) wait4(0x0, 0x0, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/118, 0x76}], 0x1, &(0x7f0000000180)=""/103, 0x67}, 0x40010100) 19:58:32 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) [ 734.853247][T23189] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 19:58:33 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000040)={0xff00}) 19:58:33 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r1, 0x0, 0x30000c) wait4(0x0, 0x0, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/118, 0x76}], 0x1, &(0x7f0000000180)=""/103, 0x67}, 0x40010100) 19:58:33 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x1155e8) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, &(0x7f0000000040)={0x0, 0x7, 0x5}) 19:58:33 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x20000880) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_SET_PMK(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x68, r2, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x16}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "f21bd238e22bd057ca516594db981ccf"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "d2a6abdbb8cd139d550ae67740b23eaf"}, @NL80211_ATTR_MAC={0xa}]}, 0x68}, 0x1, 0x0, 0x0, 0x4090}, 0x4040010) r3 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r3, 0x4600, &(0x7f0000000040)={0x0, 0x7}) 19:58:33 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 19:58:33 executing program 5: r0 = socket(0x10, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0), 0x4) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000440)) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x92200, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000240), 0x4) bind(r2, &(0x7f0000000380)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:58:33 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r1, 0x0, 0x30000c) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/118, 0x76}], 0x1, &(0x7f0000000180)=""/103, 0x67}, 0x40010100) [ 735.281568][T23262] IPVS: ftp: loaded support on port[0] = 21 19:58:33 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x0, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 19:58:33 executing program 1: ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, &(0x7f0000000500)=""/196) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f00000004c0)={0x190, 0x19, &(0x7f00000000c0)="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"}) getpid() openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000600)='/dev/vcsa#\x00', 0x1, 0x300000) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f0000000640)=""/92) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x40142, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r3, 0x40189429, &(0x7f0000000040)={0x0, 0x6, 0x5}) 19:58:33 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() connect$pptp(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x2, {0x1, @loopback}}, 0x1e) r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x4600, &(0x7f0000000040)={0x0, 0x7}) [ 735.631929][ T35] audit: type=1326 audit(1608580713.988:81): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=23303 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460faa code=0x0 19:58:34 executing program 1: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x41c0, 0x1b180, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x4, 0x4}, 0x41181, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, &(0x7f0000000080)=0x2) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x0, 0x7, 0x5}) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, &(0x7f0000000140)={0xff, [0x3, 0x40, 0x1], [{0x4, 0x9, 0x1}, {0x0, 0x0, 0x0, 0x1, 0x1}, {0x7fffffff, 0x9, 0x1, 0x0, 0x1, 0x1}, {0x76e, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x81, 0x62, 0x1, 0x1, 0x0, 0x1}, {0x698f, 0x956, 0x0, 0x1, 0x1}, {0x250, 0x78, 0x1, 0x0, 0x1}, {0x5, 0x6, 0x1, 0x1, 0x1}, {0x0, 0x5, 0x0, 0x1, 0x1}, {0x6, 0x2, 0x1, 0x0, 0x1, 0x1}, {0xa85e, 0x7fffffff, 0x1, 0x1, 0x0, 0x1}, {0x7ff, 0x6, 0x1, 0x1}], 0x7}) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000100)={0x3, &(0x7f00000000c0)=[{0x20, 0xff, 0x1f, 0x6}, {0x3, 0x4, 0x1, 0x4}, {0x6, 0x4c, 0x1f, 0x80000000}]}) 19:58:34 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r1, 0x0, 0x30000c) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/118, 0x76}], 0x1, &(0x7f0000000180)=""/103, 0x67}, 0x40010100) [ 735.745914][ T35] audit: type=1800 audit(1608580714.048:82): pid=23307 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15765 res=0 errno=0 [ 735.900914][ T35] audit: type=1800 audit(1608580714.078:83): pid=23307 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15765 res=0 errno=0 [ 735.982574][ T35] audit: type=1326 audit(1608580714.318:84): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=23316 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460faa code=0x0 19:58:34 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000040)={0x1, 0x2}) 19:58:34 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x0, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 19:58:34 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x4600, &(0x7f0000000040)={0x0, 0x7}) getcwd(&(0x7f0000000080)=""/110, 0x6e) 19:58:34 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x74, r1, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffff}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xc}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x18}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x8800}, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x0, 0x7, 0x5}) 19:58:34 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r1, 0x0, 0x30000c) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/118, 0x76}], 0x1, &(0x7f0000000180)=""/103, 0x67}, 0x40010100) [ 736.271349][ T35] audit: type=1326 audit(1608580714.628:85): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=23329 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460faa code=0x0 [ 736.411126][ T35] audit: type=1800 audit(1608580714.688:86): pid=23331 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15765 res=0 errno=0 [ 736.467828][T23262] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 736.499162][ T35] audit: type=1800 audit(1608580714.728:87): pid=23331 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15765 res=0 errno=0 19:58:35 executing program 5: r0 = socket(0x10, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0), 0x4) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000440)) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x92200, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000240), 0x4) bind(r2, &(0x7f0000000380)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:58:35 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/118, 0x76}], 0x1, &(0x7f0000000180)=""/103, 0x67}, 0x40010100) 19:58:35 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x0, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 19:58:35 executing program 0: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eefffffffffffff7000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb, 0x1, 'dsmark\x00'}, {0x10, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}]}}]}, 0x40}}, 0x0) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @dev}, 0x14) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0x1d, 0x5, &(0x7f00000000c0)=@raw=[@btf_id={0x18, 0x8, 0x3, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0x4, 0x2, 0x1b, 0xfffffffffffffff0}, @generic={0x5, 0x0, 0x5, 0x8, 0x81}, @generic={0xff, 0x8, 0xa, 0x2, 0x4833}], &(0x7f0000000100)='syzkaller\x00', 0xb71, 0xd5, &(0x7f0000000140)=""/213, 0x41000, 0x14, [], r4, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0xc, 0x6a, 0x691}, 0x10, 0xffffffffffffffff}, 0x78) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x18000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r5 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r5, 0x4600, &(0x7f0000000040)={0x0, 0x7}) 19:58:35 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000040), &(0x7f0000000100)=0x8) r0 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f00000000c0)={0x0, 0x401, 0x7}) 19:58:35 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/118, 0x76}], 0x1, &(0x7f0000000180)=""/103, 0x67}, 0x40010100) [ 736.748068][ T35] audit: type=1326 audit(1608580715.108:88): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=23345 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460faa code=0x0 [ 736.769301][T23344] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 736.927743][ T35] audit: type=1800 audit(1608580715.288:89): pid=23356 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15765 res=0 errno=0 [ 736.992180][T23359] IPVS: ftp: loaded support on port[0] = 21 [ 737.005857][T23351] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 19:58:35 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/118, 0x76}], 0x1, &(0x7f0000000180)=""/103, 0x67}, 0x40010100) [ 737.071571][ T35] audit: type=1326 audit(1608580715.318:90): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=23358 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460faa code=0x0 [ 737.806078][T23359] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 19:58:36 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000040)={0x1, 0x3}) 19:58:36 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x4600, &(0x7f0000000040)={0x0, 0x7}) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x401, 0x20000) ptrace$setregs(0xd, r0, 0xfff, &(0x7f00000001c0)="c6c858f027938f98b3fefd261eafacdcdafddc2a310ef6f45c145836dce036ccf72ae0f98e9d6cef086e08b7548d1f27f39a500c851fc7f9254d3240b63cd8150ae1e9183f6148d3195f0fedd59ff2ad760d8c6945054370b6a93a14d4182b684d66ff28cea8e17d90b6c40ed0f999af320b04eb9ec9511ca345b8b18c5edae6a6e42a85df812f68124d16b5e68c3f6a438f0dc1824bc6dc4736ed2a79b0573616d69562bb4be40c7cb83d3bdfbe4998") ptrace$setopts(0x4206, r0, 0x8, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r2, 0xc038943b, &(0x7f0000000100)={0x400, 0x8, [], 0x0, &(0x7f00000000c0)=[0x0]}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) 19:58:36 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000080)={{0x100000, 0x1000, 0xf, 0x6, 0x6, 0x8, 0x0, 0x48, 0x6, 0x1a, 0xe0, 0xfe}, {0x100000, 0xf000, 0x10, 0x1, 0xfd, 0x7, 0x2, 0x7f, 0x6, 0xcd, 0x0, 0x2}, {0x10000, 0x5b29f6d86f582455, 0xf, 0x7, 0x4, 0x6, 0x4, 0x7f, 0x2, 0x3f, 0x30}, {0x5000, 0x10000, 0x8, 0x9, 0x7f, 0x81, 0x8, 0x46, 0x3, 0x4, 0x81}, {0x2, 0x0, 0xc, 0x1f, 0xfa, 0x7, 0xfb, 0x1, 0x2d, 0x20, 0x9, 0x1f}, {0xd000, 0x1000, 0xf, 0xff, 0x4, 0x7f, 0x4, 0x0, 0x7f, 0x4, 0xa8, 0x5}, {0x100000, 0x3000, 0x3, 0x2, 0x20, 0x1, 0xa, 0x8, 0x2, 0xff, 0x5, 0x7f}, {0x3000, 0x3000, 0xf, 0x42, 0x4, 0x1, 0x9c, 0xff, 0x7, 0x8, 0x48, 0x6b}, {0x10000, 0x7}, {0x2000, 0x6}, 0xa, 0x0, 0x1000, 0x202200, 0x3, 0xd981, 0x6000, [0x7fffffff, 0xff, 0x3ff, 0x7ff]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r2 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, &(0x7f0000000040)={0x0, 0x7, 0x5}) 19:58:36 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 19:58:36 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x30000c) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/118, 0x76}], 0x1, &(0x7f0000000180)=""/103, 0x67}, 0x40010100) 19:58:36 executing program 5: r0 = socket(0x10, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0), 0x4) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000440)) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x92200, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000240), 0x4) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) [ 738.414755][T23401] IPVS: ftp: loaded support on port[0] = 21 19:58:36 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 19:58:36 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x4600, &(0x7f0000000040)={0x0, 0x7}) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000080)=0x4e, 0x4) 19:58:37 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfff}}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x46140, 0x0) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, &(0x7f0000000100), &(0x7f0000000180)=0x80) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0xc004aea7, &(0x7f0000000340)=0x10000) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000040)={0x2, 0x70, 0x7, 0x6, 0x0, 0x0, 0x0, 0xd704, 0x45030, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x4}, 0x4000, 0x3f, 0x8, 0x1, 0x800, 0x1f, 0x1d8}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'bridge_slave_0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x40) ioctl$SNDCTL_SEQ_CTRLRATE(0xffffffffffffffff, 0xc0045103, &(0x7f00000001c0)) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000480)='/dev/nvram\x00', 0x10040, 0x0) mknodat(r3, &(0x7f00000004c0)='./file0\x00', 0x20, 0x0) getpid() openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) r4 = socket(0x10, 0x0, 0x0) write(r4, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) fsetxattr$security_ima(r4, &(0x7f0000000200)='security.ima\x00', &(0x7f0000000240)=@v2={0x0, 0x1, 0x7, 0x80000001, 0xe4, "3e8ba00cf4344e5a610f83451afcfc496075a171975fd5265b03941b48ffab68629039b37db8f27d6b15de5f8e2cf40ee22c2dddecd48f2419539fa7f565182dd40c1079ebd33fdbb3395e3b2f6a0419f2840f6db98f825e01e986c2d155ac53d6dcceb585f3343582760d8692815b6ae02ec388515c252bfdde505237c15d1af1e1f34eb711e4cb11c88a073b24dead2f152b010282b70988c1b8438ca1c34ab7abb1f8a0d59c4396ec8be2946712a3934718221c6131af3f160ed44dd251142d75a55c27846cc12623a743070f8cb4bd41a20c2bacb94bcbd9bca905ca1a81158d01e2"}, 0xed, 0x1) 19:58:37 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 19:58:37 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) pwritev2(r0, 0x0, 0x0, 0x0, 0x0, 0x0) getpid() r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x4600, &(0x7f0000000040)={0x0, 0x7}) 19:58:37 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5) r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x4) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000080)={0x0, 0x80000000, 0x5}) [ 739.425502][T23401] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 19:58:38 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000040)={0x1, 0x4}) 19:58:38 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(0x0, 0x65142, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 19:58:38 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x30000c) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/118, 0x76}], 0x1, &(0x7f0000000180)=""/103, 0x67}, 0x40010100) 19:58:38 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f0000000080)={0x458, 0x13, 0x4, 0x70bd29, 0x25dfdbfb, {0x1f, 0x2, 0x11, 0x4, {0x4e24, 0x4e20, [0x7, 0x3, 0x7, 0x800], [0xff, 0x7fff, 0x2, 0x2], 0x0, [0x4, 0x4]}, 0x39, 0xaf0}, [@INET_DIAG_REQ_BYTECODE={0xb8, 0x1, "2e86bb4311c99249e191194f9dc3f8b6af0d70e71cbcb7ab90d4c89b75f3252271a6448e15d718150e380411d8f9d9188e4f3d034717d6a6d87c54edfea3d534ccc0b186cdf12dcc81b4185a33e3e1d8932f3e521af2fb823c0de217079a997f2b906692cc0f31cb8746de22399b013a866594fd0ff55261b98db2c7e4ebcfccfd0ed8ba1b4dce0bed25305c95d06ca85fee303d46b50708977599ddbceb7c52fe12a42f0cf72e4a01bcb9da0e6cc3fc19bd0ef6"}, @INET_DIAG_REQ_BYTECODE={0x9, 0x1, "d2797b3c5b"}, @INET_DIAG_REQ_BYTECODE={0xa1, 0x1, "0dc0bc1f695434030ed4a62774273d2a002e4d37469662067cb9050336b1e5dc84de9d39d632631a7310708092b9b12eaaf611d464f333608acd8f6db87edf48f5ea54c91ce5e7f72b685a5c1e04292360823cde430b76e8db3771b2200eec3e8eab112a7c7fd9e1593066db0f2f054ddf419b65a3ef6dde79376944cfd0d1e4cb727b66d164720e3ae589b1341e41badba354e1b65f57437cd85fc71c"}, @INET_DIAG_REQ_BYTECODE={0x7e, 0x1, "9e84acf96e74874c8f8522c79d5c8ce9742e3eaa38c9d8f5525eafcd8363950d588c9b74aaca017e99b8ca015de0935e469a29fe126c61182fa98061808565732664c588c54376361d4c48c8d5f5ea0d177f620ec426d5c75f678ded3ab53af6f26bbc49a3eb13e5d3b3758ef765f4d560c841e3fe9e42161c18"}, @INET_DIAG_REQ_BYTECODE={0xdd, 0x1, "cc94edf4dd7719f85e0d576d7805001955d1e92a9c35c566647c52704347b2544d315c5a7bbfe76052e5ded806f9d0950ed5cdff8168a899b85369e3a588f555e26fefe549238a434984b8696a281be36b54d18d7b62f0ea5f872a23dcea093a4ba9478803d8f862cdff356ab864f7c2853ef9209c3eef140f6d772f0a4d2485e6fa06fc1b3c32886c380466cd3baf414e661f21ec9496f9f3d414379eb6719b21793f16a412e267449062f6e45a0a6d8aac799a1780ffcd3e4b3f97f38aac14135ff45de1f345f5476efb9a547c08a181097bcd225ec3a1c7"}, @INET_DIAG_REQ_BYTECODE={0xc4, 0x1, "7154f5a19ba9c5605c2df3649de28c17f384a433a03572b810f4ab6d90dbc670e1fa9124d6b46a46a2044d5535b98e91284f6671aae05ac9180a033c6465a65001d60fabf7966032de2473737b407ed96b5a20aad897d726a2e1b6b57ce6c6b6effe630ad00d560fcf0ee09094e3d4d52d9c78d2f56203298e7afa6995ee49c655ba9db8eb008cd2717c183959ced2fcde9e3fdca812d167651a4bdf7d5fa2b9c0de6b25f04c04994b3314969b908c8902c9f171efd752ade4a97a2442f4794c"}, @INET_DIAG_REQ_BYTECODE={0x7e, 0x1, "1cfa720822da6217e052d73f11e71e90db7b2737156246c257d6703fee1e87d4fd09b0025c8df97296df8ecb72b638d9ba520c12917f7f9e05f6a6252d02e941a9ab5327e94b7d7164f1349f93a0da6482bab3badcc0e800779a6f7f1f18de6a36f152c9beacca706f24b67c248f37421682764c84aed6ba1e02"}]}, 0x458}, 0x1, 0x0, 0x0, 0x4004854}, 0x44881) 19:58:38 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5e5200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x4600, &(0x7f0000000040)={0x0, 0x7}) 19:58:38 executing program 5: r0 = socket(0x10, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0), 0x4) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000440)) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x92200, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000240), 0x4) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) [ 739.944796][T23466] IPVS: ftp: loaded support on port[0] = 21 19:58:38 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(0x0, 0x65142, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 19:58:38 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x0, 0x7, 0x5}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x20000880) r2 = socket(0x10, 0x0, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) sendmsg$NL80211_CMD_NEW_MPATH(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x7c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4040}, 0x84) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r1, 0x8008f511, &(0x7f0000000080)) 19:58:38 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) sched_yield() ioctl$VHOST_GET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af14, &(0x7f0000000080)={0x1, 0xfff}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x4600, &(0x7f0000000040)={0x0, 0x7}) 19:58:38 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(0x0, 0x65142, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 19:58:38 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x80, 0x0) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f00000000c0)=""/4) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x4600, &(0x7f0000000040)={0x0, 0x7}) 19:58:39 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83c, 0x1, @perf_bp={&(0x7f0000000080), 0x1}, 0x0, 0x0, 0x40, 0x0, 0x0, 0x1000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) getpid() openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) [ 740.666727][ T35] kauditd_printk_skb: 12 callbacks suppressed [ 740.666745][ T35] audit: type=1800 audit(1608580719.028:103): pid=23511 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15765 res=0 errno=0 [ 740.892437][T23466] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 19:58:40 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000040)={0x1, 0x5}) 19:58:40 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x30000c) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/118, 0x76}], 0x1, &(0x7f0000000180)=""/103, 0x67}, 0x40010100) 19:58:40 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 19:58:40 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) r1 = getpid() sched_setscheduler(r1, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020}, 0x2020) r2 = getpid() sched_setscheduler(r2, 0x0, 0x0) sched_setscheduler(r2, 0x1, &(0x7f0000000080)=0x4) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x0, 0x7, 0x5}) 19:58:40 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x101000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x4600, &(0x7f0000000040)={0x0, 0x7}) 19:58:40 executing program 5: r0 = socket(0x10, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0), 0x4) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000440)) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x92200, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000240), 0x4) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) [ 741.830259][ T35] audit: type=1326 audit(1608580720.188:104): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=23527 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460faa code=0x0 [ 741.874741][T23534] IPVS: ftp: loaded support on port[0] = 21 [ 741.918332][ T35] audit: type=1804 audit(1608580720.248:105): pid=23533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/newroot/532/file0/bus" dev="sda1" ino=15765 res=1 errno=0 19:58:40 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 19:58:40 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x9, 0x5c, 0x8, 0x85, 0x0, 0xb4, 0x4410, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x80000001, 0x3c6}, 0x2000, 0x7cfb, 0x9, 0x4, 0xffffffffffffffd0, 0x800, 0xc7}, r0, 0x9, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x4600, &(0x7f0000000040)={0x0, 0x7}) 19:58:40 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x40a8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xe8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x0, 0x7, 0x5}) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x100, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='westwood\x00', 0x9) [ 742.053889][ T35] audit: type=1804 audit(1608580720.278:106): pid=23533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/newroot/532/file0/bus" dev="sda1" ino=15765 res=1 errno=0 [ 742.250342][ T35] audit: type=1804 audit(1608580720.608:107): pid=23567 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/newroot/533/file0/bus" dev="sda1" ino=15765 res=1 errno=0 19:58:40 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbdfd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x0, 0x7, 0x5}) 19:58:40 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() prctl$PR_SET_FPEMU(0xa, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SOUND_MIXER_READ_VOLUME(r1, 0x80044d03, &(0x7f0000000080)) r2 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x4600, &(0x7f0000000040)={0x0, 0x7}) 19:58:40 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) [ 742.347630][ T35] audit: type=1804 audit(1608580720.648:108): pid=23567 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/newroot/533/file0/bus" dev="sda1" ino=15765 res=1 errno=0 [ 742.565947][ T35] audit: type=1804 audit(1608580720.918:109): pid=23582 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/newroot/534/file0/bus" dev="sda1" ino=15765 res=1 errno=0 [ 742.683226][ T35] audit: type=1804 audit(1608580720.928:110): pid=23582 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/newroot/534/file0/bus" dev="sda1" ino=15765 res=1 errno=0 [ 742.793753][T23534] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 19:58:41 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000040)={0x1, 0x6}) 19:58:41 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x81, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x0, 0x7, 0x5}) 19:58:41 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r1 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r0, r1, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 19:58:41 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, 0x0, 0x0, 0x30000c) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/118, 0x76}], 0x1, &(0x7f0000000180)=""/103, 0x67}, 0x40010100) 19:58:41 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.log\x00', 0x202080, 0x0) rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffffffffffffffd]}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000000)) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000380)={[0xfffffffffffffffc]}, 0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, 0x0, 0x12) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ppoll(&(0x7f00000001c0)=[{r2}, {r4, 0x9004}], 0x2, 0x0, 0x0, 0x0) write$capi20_data(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0xf9) r7 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000200)={@private1, 0x8, 0x1, 0xff, 0x0, 0x2, 0xdfb}, &(0x7f0000000240)=0x20) ioctl$int_out(r1, 0x2, &(0x7f00000001c0)) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x4600, &(0x7f0000000040)={0x0, 0x7}) 19:58:41 executing program 5: r0 = socket(0x10, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0), 0x4) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000440)) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x92200, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) bind(r2, &(0x7f0000000380)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) [ 743.192682][ T35] audit: type=1800 audit(1608580721.548:111): pid=23597 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15765 res=0 errno=0 [ 743.232815][T23596] IPVS: ftp: loaded support on port[0] = 21 19:58:41 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, 0x0, 0x0, 0x30000c) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/118, 0x76}], 0x1, &(0x7f0000000180)=""/103, 0x67}, 0x40010100) 19:58:41 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r1 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r0, r1, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) [ 743.332550][ T35] audit: type=1800 audit(1608580721.548:112): pid=23597 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15765 res=0 errno=0 19:58:41 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="000000000a00050001000700"/28], 0x1c}}, 0x20000880) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x0, 0x7, 0x5}) 19:58:41 executing program 0: setxattr$incfs_size(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='user.incfs.size\x00', &(0x7f0000000100)=0xdde, 0x8, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x4600, &(0x7f0000000040)={0x0, 0x7}) 19:58:42 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, 0x0, 0x0, 0x30000c) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/118, 0x76}], 0x1, &(0x7f0000000180)=""/103, 0x67}, 0x40010100) 19:58:42 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r1 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r0, r1, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) [ 744.159949][T23596] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 19:58:42 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000040)={0x1, 0x7}) 19:58:42 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x2b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x4600, &(0x7f0000000040)={0x0, 0x7}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={0xffffffffffffffff}) mmap$xdp(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x1000001, 0x4000010, r1, 0x80000000) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f00000000c0), 0x4) 19:58:42 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() read$fb(0xffffffffffffffff, &(0x7f0000000080)=""/199, 0xc7) r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2480, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x2, 0x7, 0x5}) 19:58:42 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r1, 0x0, 0x30000c) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/118, 0x76}], 0x1, &(0x7f0000000180)=""/103, 0x67}, 0x40010100) 19:58:42 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r1, 0x0, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 19:58:42 executing program 5: r0 = socket(0x10, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0), 0x4) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000440)) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x92200, 0x0) bind(r2, &(0x7f0000000380)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) [ 744.499305][T23667] IPVS: ftp: loaded support on port[0] = 21 19:58:42 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) ptrace$pokeuser(0x6, r0, 0x400, 0x800) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000040)={0x0, 0x7, 0x5}) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(0xffffffffffffffff, 0xc0884113, &(0x7f0000000080)={0x1, 0x4, 0xfffffffd, 0x400, 0x5, 0x8, 0x4, 0x9, 0x101, 0x6c, 0xffff, 0x2}) 19:58:43 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r1, 0x0, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 19:58:43 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x8002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x10, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) r1 = socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0x2) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x4600, &(0x7f0000000040)={0x0, 0x7}) 19:58:43 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r1, 0x0, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 19:58:43 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000100)=0x2, 0x4) getpid() r2 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) r3 = openat2(r0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x84081, 0x1}, 0x18) ioctl$SNDRV_PCM_IOCTL_PREPARE(r3, 0x4140, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, &(0x7f0000000040)={0x0, 0x7, 0x5}) 19:58:43 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x5, 0x2002) ioctl$BTRFS_IOC_SPACE_INFO(r1, 0xc0109414, &(0x7f00000000c0)={0xbc8, 0x10001, [[], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], []]}) getpid() r2 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(0xffffffffffffffff, 0x40046411, &(0x7f0000011bc0)=0x2) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x4600, &(0x7f0000000040)={0x0, 0x7}) [ 745.610827][T23667] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 19:58:44 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000040)={0x1, 0x8}) 19:58:44 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r1, &(0x7f0000000200), 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 19:58:44 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r1, 0x0, 0x30000c) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/118, 0x76}], 0x1, &(0x7f0000000180)=""/103, 0x67}, 0x40010100) 19:58:44 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000140)={0xc000, 0xff, 0x8, 0x1000}, 0x8) r0 = getpid() move_pages(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000ffb000/0x4000)=nil], &(0x7f0000000080)=[0x80000001], &(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x0) openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000100)={0x0, 0xfff, 0x81}) 19:58:44 executing program 5: r0 = socket(0x10, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0), 0x4) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000440)) bind(r2, &(0x7f0000000380)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:58:44 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x4600, &(0x7f0000000040)={0x0, 0x7}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_dev$vcsu(&(0x7f0000000100)='/dev/vcsu#\x00', 0x0, 0x2045c0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x8cc4, 0x0, 0x5}) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x2c2e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0xb0, 0x4, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x1, 0x0, 0x7f, {0x9, 0x21, 0x3, 0x81, 0x1, {0x22, 0xff6}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x9, 0x7, 0xff}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x250, 0x68, 0x4, 0x19, 0xff, 0x6f}, 0x1a, &(0x7f0000000200)={0x5, 0xf, 0x1a, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x40, 0xfc, 0x4}, @wireless={0xb, 0x10, 0x1, 0x4, 0x40, 0x80, 0x0, 0x1, 0x9}]}, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x455}}]}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={r2, 0x13, 0x0, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3}, 0x20) [ 746.255796][ T35] kauditd_printk_skb: 14 callbacks suppressed [ 746.255824][ T35] audit: type=1800 audit(1608580724.608:127): pid=23726 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15765 res=0 errno=0 [ 746.282159][T23727] IPVS: ftp: loaded support on port[0] = 21 19:58:44 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_LINK(r1, 0x40044160, &(0x7f0000000080)=0x3) r2 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, &(0x7f0000000040)={0x0, 0x7, 0x5}) 19:58:44 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r1, &(0x7f0000000200), 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) [ 746.440226][ T35] audit: type=1326 audit(1608580724.658:128): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=23724 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460faa code=0x0 [ 746.570436][ T35] audit: type=1800 audit(1608580724.658:129): pid=23726 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15765 res=0 errno=0 19:58:45 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r1, &(0x7f0000000200), 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) [ 746.711134][ T35] audit: type=1800 audit(1608580724.928:130): pid=23757 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15765 res=0 errno=0 [ 746.834776][ T35] audit: type=1800 audit(1608580724.958:131): pid=23757 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15765 res=0 errno=0 19:58:45 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x0, 0x7, 0x5}) r1 = socket(0x10, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r2, 0x0, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f0000000300)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x6a}) ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000440)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @mcast1, @loopback}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f00000010c0)=ANY=[@ANYRES64=r5, @ANYBLOB="040000000000000000000000000000003d0400000000000001000007000000000000004000000000000000000000000000000000000000000000000800000000000000000000000000000002000200000000000800000000000000008000000000000000000000000000000000000000b0183ba27c02a1a2ddb8ae"]) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000000c0)={0x0, r5, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP(r2, 0xd0009412, &(0x7f0000000180)={r5, 0x349}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000080)={{r5, 0x8, 0x6, 0x0, 0x8, 0x833, 0x2, 0x401, 0x4, 0x8, 0x4, 0xf1d, 0x180000000, 0x6, 0x7}, 0x10, [0x0, 0x0]}) 19:58:45 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r2 = open(0x0, 0x164142, 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) [ 746.925470][ T35] audit: type=1800 audit(1608580725.198:132): pid=23766 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15765 res=0 errno=0 19:58:45 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) r1 = socket(0x10, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) getsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f0000000080)=""/109, &(0x7f0000000100)=0x6d) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x4600, &(0x7f0000000040)={0x0, 0x7}) [ 747.074717][ T35] audit: type=1800 audit(1608580725.208:133): pid=23766 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15765 res=0 errno=0 [ 747.227136][ T35] audit: type=1800 audit(1608580725.528:134): pid=23774 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15765 res=0 errno=0 [ 747.347257][T23727] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 19:58:46 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000040)={0x1, 0x300}) 19:58:46 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r1, 0x0, 0x30000c) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/118, 0x76}], 0x1, &(0x7f0000000180)=""/103, 0x67}, 0x40010100) 19:58:46 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r2 = open(0x0, 0x164142, 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 19:58:46 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffca, 0x80}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) r1 = socket(0x10, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080)={0x0, 0xfffffffa, 0x20}, &(0x7f00000000c0)=0xc) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x4600, &(0x7f0000000040)={0x0, 0x7}) 19:58:46 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x10, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0xfffffffe}, 0x0, 0x7, 0xffffffffffffffff, 0x3) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x0, 0x7, 0x5}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$UI_SET_KEYBIT(r2, 0x40045565, 0x1ef) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0xc0585605, &(0x7f00000001c0)={0x1, 0x0, {0xdf, 0x7, 0x3004, 0x1, 0xc, 0x7, 0x0, 0x4}}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f0000000080)='/dev/fb1\x00', &(0x7f00000000c0)="5e393c7aa1654820217935a8a6e2e42acf171288b300af831173ac8af8ae0d71232f413461193419a5109589432bb0054073e6c6db126d79262e0877dbf90f8449af7c2bceab2d7ae9e17d904691c0d6e1bb591c3a0c2219f0f24014eb9451dd415a475a42fdfe35d04b0ac0dd2ed9185879ed942aecd7d3afae6fdc371eb66ece6b21aa08f621c1f5d80061e975cad5419f64dc47f2b42fd2a8fb9a37aa5e043b562631df73c07b019e27eff553b557d154ee1155ae7a5bc7808d494ae3d88b444b93dfafbe49fa03acdab7c27173c0bfd4554b248809b14fac4cc6a87b4bb2d8ff5f24100cbb9397f71c25", 0xec) 19:58:46 executing program 5: r0 = socket(0x10, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0), 0x4) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000380)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) [ 747.910169][ T35] audit: type=1326 audit(1608580726.268:135): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=23788 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460faa code=0x0 [ 747.918331][T23795] IPVS: ftp: loaded support on port[0] = 21 19:58:46 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r2 = open(0x0, 0x164142, 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) [ 748.065083][ T35] audit: type=1800 audit(1608580726.268:136): pid=23794 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15765 res=0 errno=0 19:58:46 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41c0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x1000000000002, r1, 0x0) fstat(r0, &(0x7f0000000040)) getpid() r3 = dup2(r2, r0) ioctl$SNDRV_PCM_IOCTL_PAUSE(r3, 0x40044145, &(0x7f00000000c0)=0x401) openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) 19:58:46 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x100}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x256}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, &(0x7f0000000040)={0x0, 0x7, 0x5}) 19:58:46 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xd82c}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = getpid() sched_setscheduler(r1, 0x0, 0x0) capset(&(0x7f0000000080)={0x20080522, r1}, &(0x7f00000000c0)={0x4, 0xfffff141, 0x1f, 0x7, 0x2, 0x6}) openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x131100, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) r2 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, &(0x7f0000000040)={0x0, 0x7, 0x5}) ptrace$getregset(0x4204, r0, 0x202, &(0x7f0000000140)={&(0x7f0000000100)=""/61, 0x3d}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mkdirat$cgroup(r4, &(0x7f0000000180)='syz1\x00', 0x1ff) 19:58:46 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x80, 0x10) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@dev={0xfe, 0x80, [], 0x1e}, 0x5, 0x2, 0xff, 0x6, 0x2, 0x800}, &(0x7f0000000100)=0x20) r2 = socket(0x10, 0x0, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f0000000140)={{0xa, 0x4e23, 0x3bf, @private0, 0x2}, {0xa, 0x4e24, 0x4, @mcast1, 0x3}, 0x101, [0x5, 0xffffff75, 0x3ff, 0xffff, 0x81, 0xc9, 0x5, 0x1]}, 0x5c) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x4600, &(0x7f0000000040)={0x0, 0x7}) 19:58:46 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) [ 748.845202][T23795] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 19:58:47 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000040)={0x1, 0x500}) 19:58:47 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r0) getpid() r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000040)={0x0, 0x7, 0x5}) 19:58:47 executing program 4: gettid() clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x30000c) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/118, 0x76}], 0x1, &(0x7f0000000180)=""/103, 0x67}, 0x40010100) 19:58:47 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x4600, &(0x7f0000000040)={0x4000000000000, 0x7, 0xfffffffffffffffe}) 19:58:47 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 19:58:47 executing program 5: r0 = socket(0x10, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0), 0x4) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind(0xffffffffffffffff, &(0x7f0000000380)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) [ 749.517313][T23859] IPVS: ftp: loaded support on port[0] = 21 [ 749.538492][T23864] ptrace attach of "/root/syz-executor.4"[23862] was attempted by "/root/syz-executor.4"[23864] 19:58:48 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x148, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0xf4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x335}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff7}]}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x4}, 0x10) getpid() ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000080)=""/159) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvram\x00', 0x20000, 0x0) write$P9_RSETATTR(r0, &(0x7f00000003c0)={0x7, 0x1b, 0x2}, 0x7) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x4600, &(0x7f0000000040)={0x0, 0x7}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UI_SET_PROPBIT(r3, 0x4004556e, 0xf) 19:58:48 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x41c0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x2, 0xfffffffd, 0x0, 0x0, 0x0, 0x917c}, 0x0, 0x7, r1, 0x0) getpid() r2 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) r3 = socket(0x10, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f00000000c0)={@hyper}) r4 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r4, 0x10d, 0x800000000d, &(0x7f00000001c0)="0357", 0x2) write(r3, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) ioctl$BTRFS_IOC_GET_FEATURES(r3, 0x80189439, &(0x7f0000000080)) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, &(0x7f0000000040)={0x0, 0x7, 0x5}) 19:58:48 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 19:58:48 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x4600, &(0x7f0000000040)={0xfffffffffffffffd, 0x7, 0xfffffffffffffff8}) 19:58:48 executing program 1: sched_setscheduler(0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r1 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = getpid() r5 = getpid() sched_setscheduler(r5, 0x0, 0x0) tgkill(r4, r5, 0x19) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000080)='[,.*\x03+{!-^\x00', 0x0, r0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x5450, 0x0) r6 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r6, 0x40189429, &(0x7f0000000040)={0x0, 0x7, 0x5}) 19:58:48 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) [ 750.633370][T23859] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 19:58:49 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000040)={0x1, 0x600}) 19:58:49 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2200, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x7fff) semget$private(0x0, 0x0, 0x82) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x4600, &(0x7f0000000040)={0x0, 0x7}) 19:58:49 executing program 4: gettid() clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x30000c) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/118, 0x76}], 0x1, &(0x7f0000000180)=""/103, 0x67}, 0x40010100) 19:58:49 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 19:58:49 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x7fffffff, 0x200) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f00000000c0)={0x0, @bt={0xffff0001, 0x8, 0x1, 0x2, 0xfffffffffffffffc, 0x7, 0x8, 0xfff, 0x36a, 0xb2, 0x7ff, 0xba, 0x8000, 0xecb, 0x4, 0x13, {}, 0x0, 0x4}}) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000040)={0x0, 0x7, 0x5}) 19:58:49 executing program 5: r0 = socket(0x10, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0), 0x4) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind(0xffffffffffffffff, &(0x7f0000000380)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) [ 751.268672][ T35] kauditd_printk_skb: 16 callbacks suppressed [ 751.268692][ T35] audit: type=1800 audit(1608580729.628:153): pid=23920 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15765 res=0 errno=0 [ 751.325455][T23925] IPVS: ftp: loaded support on port[0] = 21 19:58:49 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x4600, &(0x7f0000000040)={0x0, 0x7}) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x1, 0x230002) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x1, 0x23930195}, 0xb) 19:58:49 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) [ 751.439818][ T35] audit: type=1326 audit(1608580729.688:154): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=23922 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460faa code=0x0 19:58:49 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x0, 0x7, 0x5}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VFIO_SET_IOMMU(r2, 0x3b66, 0x5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0xf503, 0x0) [ 751.565826][ T35] audit: type=1800 audit(1608580729.718:155): pid=23934 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15765 res=0 errno=0 19:58:50 executing program 0: prctl$PR_SET_SECUREBITS(0x1c, 0x1d) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x22481, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x4600, &(0x7f0000000040)={0x0, 0x7}) r2 = signalfd4(r1, &(0x7f0000000080)={[0x3ff]}, 0x8, 0x800) mq_notify(r2, &(0x7f00000000c0)={0x0, 0x3c, 0x2, @tid=r0}) [ 751.708889][ T35] audit: type=1800 audit(1608580730.068:156): pid=23957 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15765 res=0 errno=0 19:58:50 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) [ 751.851806][ T35] audit: type=1800 audit(1608580730.108:157): pid=23957 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15765 res=0 errno=0 19:58:50 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x44900, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) r1 = socket(0x10, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) tee(r0, r1, 0x48, 0x1) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x0, 0x7, 0x5}) [ 752.067390][ T35] audit: type=1800 audit(1608580730.428:158): pid=23977 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15765 res=0 errno=0 [ 752.174180][ T35] audit: type=1800 audit(1608580730.468:159): pid=23977 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15765 res=0 errno=0 [ 752.395202][T23925] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 19:58:51 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000040)={0x1, 0x700}) 19:58:51 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xb, &(0x7f0000000080)=0x7, 0x4) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x4600, &(0x7f0000000040)={0x0, 0x7}) 19:58:51 executing program 4: gettid() clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x30000c) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/118, 0x76}], 0x1, &(0x7f0000000180)=""/103, 0x67}, 0x40010100) 19:58:51 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_S_AUDIO(r2, 0x40345622, &(0x7f0000000080)={0x5, "a95e7774cbb48a67cb21631021625c773e379c56b5a032a165e0804ef9019030", 0x3, 0x1}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x0, 0x7, 0x5}) 19:58:51 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 19:58:51 executing program 5: r0 = socket(0x10, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0), 0x4) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind(0xffffffffffffffff, &(0x7f0000000380)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) [ 752.902050][T23999] ptrace attach of "/root/syz-executor.4"[23996] was attempted by "/root/syz-executor.4"[23999] [ 752.919402][ T35] audit: type=1800 audit(1608580731.278:160): pid=23995 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15765 res=0 errno=0 [ 752.937474][T23994] IPVS: ftp: loaded support on port[0] = 21 [ 753.052763][ T35] audit: type=1326 audit(1608580731.278:161): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=23990 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460faa code=0x0 19:58:51 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 19:58:51 executing program 0: ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000080)={[{0x400, 0x0, 0xf7, 0x3a, 0x4, 0x80, 0x0, 0x7f, 0x80, 0x1f, 0x2, 0x5, 0x2000000000009}, {0x10000, 0x28, 0x6, 0x5, 0x1, 0x8, 0x3f, 0x5, 0x4, 0x6, 0x20, 0xfa, 0x4bb}, {0x6, 0x800, 0x1f, 0xff, 0x4, 0x0, 0x5, 0x81, 0x1, 0x7, 0xfe, 0x5, 0x1}], 0x2}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x4600, &(0x7f0000000040)={0x0, 0x7}) [ 753.188552][ T35] audit: type=1800 audit(1608580731.308:162): pid=23995 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15765 res=0 errno=0 19:58:51 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41c0, 0x440, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x48313}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x0, 0x7, 0x5}) 19:58:51 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$cgroup_pid(r2, &(0x7f0000000140)=r0, 0x12) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x40020, 0x0) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00032abd7000fcdbdf250300000014000200fe8000000000000000000000000000aa08008500ffffffffe8a4da406309"], 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x8881) r5 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r5, 0x4600, &(0x7f0000000040)={0x0, 0x7}) 19:58:51 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r0, r2, 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 19:58:51 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x80015, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000080)={0x0, 0x2, [@link_local, @dev={[], 0x1f}]}) r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, &(0x7f00000000c0)=0x4) ioctl$USBDEVFS_RESET(r0, 0x5514) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x0, 0x7, 0x5}) [ 753.965099][T23994] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 19:58:52 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000040)={0x1, 0xff00}) 19:58:52 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x30000c) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/118, 0x76}], 0x1, &(0x7f0000000180)=""/103, 0x67}, 0x40010100) 19:58:52 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r0, r2, 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 19:58:52 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x0, 0x7, 0x5}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$FBIOBLANK(r2, 0x4611, 0x0) 19:58:52 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x4600, &(0x7f0000000040)={0x0, 0x7}) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f0000000080)) [ 754.179918][T24057] ptrace attach of "/root/syz-executor.4"[24054] was attempted by "/root/syz-executor.4"[24057] 19:58:52 executing program 5: r0 = socket(0x10, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0), 0x4) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000380)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:58:52 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r0, r2, 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 19:58:52 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x0, 0x7, 0x5}) 19:58:52 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000080), 0x8) r0 = socket(0x10, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x7c, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x7a}}}}, [@NL80211_ATTR_CSA_IES={0x54, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0x12, 0xbb, [0x80, 0x5b0, 0x40, 0x1, 0x1000, 0x4, 0x9]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xc, 0xbb, [0x800, 0x0, 0x400, 0x0]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x6, 0xba, [0x5]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x14, 0xba, [0x4, 0x1f, 0xffff, 0x0, 0x5ce, 0x8001, 0x401, 0x0]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x14, 0xba, [0x1ff, 0x2, 0x0, 0x3f, 0x6, 0x9, 0x0, 0x9]}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x44}, 0x1) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x4600, &(0x7f0000000040)={0x0, 0x7}) 19:58:52 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) creat(0x0, 0x0) 19:58:53 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x4600, &(0x7f0000000040)={0x0, 0x7}) [ 754.645588][T24072] IPVS: ftp: loaded support on port[0] = 21 19:58:53 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x0, 0x200005, 0x1f}) 19:58:53 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000040)={0x1, 0x1000000}) 19:58:53 executing program 0: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41c0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ocfs2_control\x00', 0x111101, 0x0) getpid() io_setup(0x6ace, &(0x7f0000000080)) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x4600, &(0x7f0000000040)={0x0, 0x7}) 19:58:53 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x30000c) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/118, 0x76}], 0x1, &(0x7f0000000180)=""/103, 0x67}, 0x40010100) 19:58:53 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000) r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x0, 0x7, 0x5}) 19:58:53 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) creat(0x0, 0x0) 19:58:53 executing program 5: r0 = socket(0x10, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0), 0x4) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000380)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) [ 755.624558][T24127] IPVS: ftp: loaded support on port[0] = 21 [ 755.636614][T24132] ptrace attach of "/root/syz-executor.4"[24129] was attempted by "/root/syz-executor.4"[24132] 19:58:54 executing program 0: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000080), 0xffffffffffffffff, r0}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x4600, &(0x7f0000000040)={0x0, 0x7}) 19:58:54 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x0, 0x7, 0x5}) getcwd(&(0x7f0000000080)=""/5, 0x5) 19:58:54 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000040)={0x1, 0x2000000}) 19:58:54 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x88000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4a60}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() lsetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='trusted.overlay.metacopy\x00', &(0x7f0000000200)='\xc8\xbc\xef4\x0f@\xca\xcd\x8bc2X\xa2\x00\x00\x00\x8fo\xaf\'&`\xc49E\xb07\xedWli\xde\x86|\xdd\xeeW\xc4\xa8\x1c\xdd\xb6,\x17\x1d\a\xb5\xf5\t\x88H\xcc\xc9M\xc6\xa6\x87\x19t\x97G\x18d,z\v\xd0U3\x96\xea\x9fC\xb3\x83\xc9\x9a\xa5_\xae\x1d\x828\x0f\x85%\xd2A\x06K\xb2>\xa8\x10\xf62\xe0}.\xe2\x8f\x1f\x9f\xca\xbc\x04\x91A5\xa8\x85\xce!`\xc2A`\x82R\x00'/134, 0x86, 0x2) r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x4600, &(0x7f0000000040)={0x0, 0x7}) 19:58:54 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x600400, 0x0) ioctl$VIDIOC_ENUMAUDOUT(r0, 0xc0345642, &(0x7f00000000c0)={0x10000, "2a29f7121cb2e5516f80a613372d50a0dac90c1d61a65891f9f296e0ded6d60e"}) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000040)={0x0, 0x7, 0x5}) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000140)=0x5) 19:58:54 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x30000c) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/118, 0x76}], 0x1, &(0x7f0000000180)=""/103, 0x67}, 0x40010100) 19:58:54 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) creat(0x0, 0x0) 19:58:54 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x28, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffff864, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x5}, 0x0, 0x3, 0x0, 0x5, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fadvise64(r0, 0x8, 0x20, 0x0) getpid() r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x4600, &(0x7f0000000040)={0x0, 0x7}) 19:58:55 executing program 4: gettid() prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x30000c) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/118, 0x76}], 0x1, &(0x7f0000000180)=""/103, 0x67}, 0x40010100) [ 756.623156][T24181] ptrace attach of "/root/syz-executor.4"[24179] was attempted by "/root/syz-executor.4"[24181] [ 756.644028][ T35] kauditd_printk_skb: 12 callbacks suppressed [ 756.644046][ T35] audit: type=1326 audit(1608580734.998:175): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=24181 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460faa code=0x0 19:58:55 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x1, 0xe6a370903e14b339) setsockopt$inet6_tcp_int(r0, 0x6, 0x1, &(0x7f0000000100)=0x9f, 0x4) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000080)) getpid() r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000040)={0x0, 0x7, 0x5}) 19:58:55 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f00000001c0)=r0) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x4600, &(0x7f0000000040)={0x0, 0x7}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000080)={0x0, 0x0, "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"}) [ 756.789823][ T35] audit: type=1800 audit(1608580735.138:176): pid=24186 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15765 res=0 errno=0 [ 756.849555][T24189] ptrace attach of "/root/syz-executor.4"[24188] was attempted by "/root/syz-executor.4"[24189] [ 756.878637][ T35] audit: type=1800 audit(1608580735.178:177): pid=24186 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15765 res=0 errno=0 [ 757.056879][ T35] audit: type=1326 audit(1608580735.218:178): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=24187 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460faa code=0x0 19:58:55 executing program 5: r0 = socket(0x10, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0), 0x4) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000380)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:58:55 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x32}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() timer_create(0x2, &(0x7f0000000240)={0x0, 0x2a, 0x4, @thr={&(0x7f0000000080)="8c1bbf7147bea4f95a98584f082c4d8f72ca44fa657c2c0b4ad7b6f6fcb8cdea0dea7f25fc5f50efd0881dc5083f7a373835546853416836fc093c4263b32cb357e992bd7fd4cc428af53ca49d5f942aede35306b9dcc74e26f92bcbcfc09aa249b44f5c7b1fe07f3e85ce5b1552dde0b0dde444ec9b1bc289564b3dee1e1faf8fa86e2cd5cdf845962aad8c1b1019b7b273810e96ba1d036544e4fd723addbca0e1bd8171e42eada7a19dcd6499a4ce9fbd2ab55b6e93d04da7bb97cbb111eea053fe79f0b5ca4db4d5ba770e1178ac372c7465", &(0x7f0000000180)="0841bca4af0df2bc59dfb0f3a46747017aba0d8a8955d9b1d895658e67e2961644c3ecd59e8824c2b582892ca54c8438b3c7284bfb20f18427e27b4ee614d718f5fa37bf89bfe427c31e0b2de02e05382d764ed17958d9c447c080f245900cf82475690ffff754a725ca60e95a15fb5794d2febfc96f1bbc38c98ece1ef69d46420e8d2010d9e301a524ad24a4b55e099c58fe68399a281410613dcf389c774e35e01bd1c0401ddd169f0268"}}, &(0x7f0000000280)) r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x0, 0x7, 0x5}) 19:58:55 executing program 0: r0 = socket(0x10, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x12c, 0x12, 0x4, 0x70bd2b, 0x25dfdbfd, {0x1a, 0x6, 0x21, 0x9, {0x4e23, 0x4e22, [0x10000000, 0x8b, 0x1, 0x80], [0x6b2, 0x1, 0x3], 0x0, [0x2, 0x4]}, 0x4c21, 0x1}, [@INET_DIAG_REQ_BYTECODE={0x26, 0x1, "5d8b0d1e87fedbaef2f7250d1e4ecd53c9bfd3e7a1b6ee1e55ef199e0d4abcb5aa01"}, @INET_DIAG_REQ_BYTECODE={0xb8, 0x1, "80faf4400bf9f5dc047a43ddc5281ff10a1f705c2c868dbbd90ea1ca63ae3400ee73fba89acd25380b2097ca11ac06c1488d587f59364ae6c7e591239eb7cb43d656ec5be69a3a688d6971532aef1b7ba43337cc1dc7bc127067043a6aaa8a4ffab47a24099c85815e5c3dacc7337a03371607fac1ca84805d1c24c0fcba0f6da8effffd37db73ed11e100ade48fb5f57d77b37e6574138085674b919344161766af58ec43b69c2dfb7383c23658b18b8517554c"}]}, 0x12c}, 0x1, 0x0, 0x0, 0x811}, 0x10001) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x4600, &(0x7f0000000040)={0x0, 0x7}) 19:58:55 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000040)={0x1, 0x3000000}) 19:58:56 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0xc6, 0x0, 0x41c0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x100, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x4600, &(0x7f0000000040)={0x0, 0x7}) r1 = socket(0x10, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) mq_timedreceive(r3, &(0x7f0000000140)=""/16, 0x10, 0x0, &(0x7f00000001c0)={r4, r5+10000000}) 19:58:56 executing program 3: r0 = socket(0x10, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0), 0x4) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind(0xffffffffffffffff, &(0x7f0000000380)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) [ 757.657708][T24211] IPVS: ftp: loaded support on port[0] = 21 19:58:56 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x40800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x820}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x0, 0x7, 0x5}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x20000880) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000080)={0x0, 0x1ff, 0x1, [0x43, 0x5, 0x7, 0x4, 0x1], [0x4, 0x0, 0x3f, 0x7, 0x7, 0x1, 0x3, 0x8, 0xd86, 0xf5, 0xc1c, 0x2, 0x8, 0x8c4f, 0xfffffffffffffe01, 0x2, 0x5, 0x80000000, 0xfffffffffffff01e, 0x1, 0x80, 0xffff, 0x2, 0x6, 0x101, 0xe4d, 0x9, 0x20, 0x0, 0x4, 0x0, 0xa3, 0x80000000, 0x1ff, 0x100000000, 0x4, 0x1, 0x3ff, 0x2, 0x0, 0x0, 0x0, 0x100000001, 0x6, 0x2, 0x9584, 0xa0, 0x9, 0x5, 0x2, 0xae, 0x1f, 0x40, 0xc73, 0x9, 0x4, 0xff, 0x58, 0xffff, 0x80, 0x401, 0x8000, 0x5, 0x8, 0x237, 0x1, 0x5, 0x0, 0x800, 0x9, 0x100000001, 0x40, 0x2, 0xfffffffffffffffb, 0xe2, 0x8155, 0x3, 0xfffffffffffffffd, 0x4, 0x2, 0xffffffffffffff64, 0x70081a3c, 0xffffffffffff0001, 0x7ff, 0x6, 0x8, 0x92fe, 0x400, 0x4, 0x67a425e0, 0x7f, 0x9, 0xffffffffffffff80, 0xdd, 0x5, 0x5, 0x40, 0x10000, 0x100, 0x8000, 0x2, 0x3f, 0xffff, 0x8, 0x6, 0x50000000000000, 0x8, 0xff, 0x3, 0x4, 0x3f, 0x7ff, 0x1b64, 0x80000000, 0x9, 0x7, 0x8, 0x6, 0x3ff, 0x8, 0x2]}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f00000004c0)={0xd, 0x1, {0x8, @struct={0x319, 0xfffffffe}, 0x0, 0x9, 0x830, 0xfffffffffffffffe, 0x3, 0x7b2, 0x4e, @struct={0x5, 0xfffff3ff}, 0x4, 0x80000000, [0xc13, 0x7f, 0xfffffffffffffffa, 0x9, 0xffff, 0x7]}, {0x4, @struct={0x9, 0x2}, 0x0, 0x9, 0xfffffffffffffff8, 0x89ba, 0x9, 0x1, 0x0, @usage=0x9, 0x50, 0x328151a8, [0x5, 0x20, 0x6, 0x8, 0xfffffffffffffff8, 0x800]}, {0xfffffffffffffffa, @usage=0x1ff, r2, 0x6, 0x5cf, 0x2d2, 0x7, 0x6, 0x22, @usage=0x8001, 0x9, 0x8, [0x6, 0x0, 0xd78, 0x7fffffff, 0x81, 0x1]}, {0x2, 0x19d7, 0x3}}) 19:58:56 executing program 4: gettid() prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x30000c) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/118, 0x76}], 0x1, &(0x7f0000000180)=""/103, 0x67}, 0x40010100) [ 757.850092][T24220] IPVS: ftp: loaded support on port[0] = 21 19:58:56 executing program 0: perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5a6, 0x4, @perf_config_ext={0xfffffffffffffff7, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x4600, &(0x7f0000000040)={0x0, 0x7}) [ 757.921470][T24236] ptrace attach of "/root/syz-executor.4"[24231] was attempted by "/root/syz-executor.4"[24236] [ 757.943231][ T35] audit: type=1326 audit(1608580736.298:179): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=24225 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460faa code=0x0 19:58:56 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) r1 = request_key(&(0x7f0000000080)='logon\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)=')\x00', 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000140)='rxrpc_s\x00', &(0x7f0000000180)=@secondary='builtin_and_secondary_trusted\x00') ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x0, 0x7, 0x5}) 19:58:56 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600)='nl80211\x00') syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x9, 0x440000) sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001dc0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x2}}}}}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x68, r1, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x84, 0xc}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x73}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x79}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x52}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x52}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x73}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x64}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x8c0) getpid() r2 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x4600, &(0x7f0000000040)={0x0, 0x7}) 19:58:56 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x9, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x0, 0x7, 0x5}) 19:58:57 executing program 5: r0 = socket(0x10, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0), 0x4) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000380)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:58:57 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) 19:58:57 executing program 4: gettid() prctl$PR_SET_PTRACER(0x59616d61, 0x0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x30000c) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/118, 0x76}], 0x1, &(0x7f0000000180)=""/103, 0x67}, 0x40010100) [ 758.908910][T24220] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 759.036530][T24294] ptrace attach of "/root/syz-executor.4"[24291] was attempted by "/root/syz-executor.4"[24294] [ 759.061498][ T35] audit: type=1326 audit(1608580737.418:180): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=24290 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460faa code=0x0 [ 759.125563][T24295] IPVS: ftp: loaded support on port[0] = 21 [ 759.724757][T24295] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 19:58:58 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000040)={0x1, 0x4000000}) 19:58:58 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x80000, 0x0) ioctl$CAPI_NCCI_OPENCOUNT(r1, 0x80044326, &(0x7f00000000c0)=0x800) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x3, 0x7, 0x4}) 19:58:58 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000100)=ANY=[@ANYBLOB="666906746572000000000000000000001572edddbebb59d75d0000006beac00a58ac937abcaa8b76b71e4e1f54f3e54d3e00"/65], &(0x7f00000000c0)=0x39) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x4600, &(0x7f0000000040)={0x0, 0x7}) 19:58:58 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r0, r2, 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 19:58:58 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r1, 0x0, 0x30000c) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/118, 0x76}], 0x1, &(0x7f0000000180)=""/103, 0x67}, 0x40010100) 19:58:58 executing program 5: r0 = socket(0x10, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0), 0x4) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000380)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) [ 760.241674][ T35] audit: type=1326 audit(1608580738.598:181): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=24327 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460faa code=0x0 19:58:58 executing program 1: getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x0, 0x7, 0x5}) [ 760.316816][T24336] IPVS: ftp: loaded support on port[0] = 21 [ 760.352303][ T35] audit: type=1800 audit(1608580738.658:182): pid=24339 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15765 res=0 errno=0 19:58:58 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x4600, &(0x7f0000000040)={0x0, 0x7}) r1 = socket$inet_udp(0x2, 0x2, 0x0) lseek(r1, 0xfffffffffffffff9, 0x1) 19:58:58 executing program 3: r0 = socket(0x10, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0), 0x4) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind(0xffffffffffffffff, &(0x7f0000000380)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) [ 760.488413][ T35] audit: type=1800 audit(1608580738.688:183): pid=24339 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15765 res=0 errno=0 19:58:59 executing program 1: syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x200, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd) r1 = socket(0x10, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @dev={0xfe, 0x80, [], 0x30}, 0x3ff}, 0x1c) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f00000002c0)={0x990000, 0x2, 0x1f, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0xa2095b, 0x2, [], @p_u16=&(0x7f0000000100)}}) socket$xdp(0x2c, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(0xffffffffffffffff, 0x3309) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r2 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, &(0x7f0000000040)={0x0, 0x7, 0x5}) [ 760.731101][T24372] IPVS: ftp: loaded support on port[0] = 21 19:58:59 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x6, 0x8, 0x20, 0x0, 0x41c0, 0x4004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x7}, 0x1000, 0x8, 0x9, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) rt_sigpending(&(0x7f0000000200), 0x8) getpid() openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/mdstat\x00', 0x0, 0x0) ioctl$KDENABIO(r0, 0x4b36) ioctl$USBDEVFS_GET_SPEED(r0, 0x551f) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$FBIOPUTCMAP(r2, 0x4605, &(0x7f00000001c0)={0x678, 0x1, &(0x7f00000000c0)=[0x800], &(0x7f0000000100)=[0x7, 0x9, 0x7f, 0x7fff, 0x1f5e, 0x7, 0x7], &(0x7f0000000140)=[0x5706, 0x7, 0x1], &(0x7f0000000180)=[0x4, 0x0, 0x200, 0x200, 0x0, 0x8000, 0x0, 0x2, 0x8]}) 19:58:59 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x810, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x2000, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x0, 0x7, 0x5}) r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYRES16=r2, @ANYBLOB="0111934bd400fddbdf250e0000004000038014000600fc0000000000000000000000000000011c00060078dcb8cf58ff0200000000000000000001000000000000020076657400000000000000f0737200000000080005003785c778ac6562430900004e0e6a4f57811b12ef4f6facaafbef023a95d80dc53703ebdc6f43f011351e8aa75b68c4e6bb3797ade0e1ea121de7842fe03074cd0d95462d431a87359167eab229dc2de22e127c2dfacdb1d9f9e3964d40ffb197ba36256736cae3e558e10a108392b585e48faafa9cc431e3ef98ff086133d6b727a72936ec9da56962e8344162c513"], 0x78}, 0x1, 0x0, 0x0, 0x20000044}, 0x48080) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x80, r2, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xa7a6}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x38, 0xf}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x22}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x40045) [ 761.376921][T24336] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 761.591337][T24372] netlink: 'syz-executor.3': attribute type 4 has an invalid length. 19:59:00 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000040)={0x1, 0x5000000}) 19:59:00 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r1, 0x0, 0x30000c) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/118, 0x76}], 0x1, &(0x7f0000000180)=""/103, 0x67}, 0x40010100) 19:59:00 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x20000880) fallocate(r0, 0x0, 0x0, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x80000, 0x1, 0x835183c849788478}, 0x18) ioctl$F2FS_IOC_FLUSH_DEVICE(r1, 0x4008f50a, &(0x7f0000000100)={0x3c9f800, 0x10001}) r2 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, &(0x7f0000000040)={0x0, 0x7, 0x5}) 19:59:00 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x4600, &(0x7f0000000040)={0x0, 0x7}) 19:59:00 executing program 5: r0 = socket(0x10, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0), 0x4) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000380)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:59:00 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x0, 0x7, 0x5}) r1 = socket(0x10, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r2, 0x0, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f0000000300)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x6a}) ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000440)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @mcast1, @loopback}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f00000010c0)=ANY=[@ANYRES64=r5, @ANYBLOB="040000000000000000000000000000003d0400000000000001000007000000000000004000000000000000000000000000000000000000000000000800000000000000000000000000000002000200000000000800000000000000008000000000000000000000000000000000000000b0183ba27c02a1a2ddb8ae"]) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000000c0)={0x0, r5, "01acc2898eb82754888306174589b4acdc8c0275128f4e5c6eda10737dcbe938a644a518c3cb9cf930990e50a3e7c297a0e43890e4f3946ea99df579ab8a2d4ff67d92aa0f71c448c84996d6e90ad99f76c4e99a5e6347942071f6151d98ae1c9859ff52581b3d008fabd3ba74c71e172b697a3e3835710369569221932c05c12ac0e00291fafff75dce67b1951ef25bf247061e168853ee104de5b54e9f08c5321bf1faf053481420d8acf6db13f1d525b60cd3f7eca51f60a34d771535fe4a9622ff06a23db09108c9464c3e503c09f7adb765225b7ca7a220be50568692d31ad22ed0c40e285022b5ac20628b91113b6b1cff932f17b71cd95e85b88c9601", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP(r2, 0xd0009412, &(0x7f0000000180)={r5, 0x349}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000080)={{r5, 0x8, 0x6, 0x0, 0x8, 0x833, 0x2, 0x401, 0x4, 0x8, 0x4, 0xf1d, 0x180000000, 0x6, 0x7}, 0x10, [0x0, 0x0]}) [ 762.201106][T24423] IPVS: ftp: loaded support on port[0] = 21 [ 762.254771][ T35] audit: type=1326 audit(1608580740.618:184): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=24416 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460faa code=0x0 19:59:00 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x2, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x0, 0x7, 0x5}) 19:59:00 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) getpid() r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="0200000000d997a9578d589e167f010007290900000000000000"], 0x1c}}, 0x20000880) write$binfmt_elf64(r0, &(0x7f0000000040)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x1f, 0x0, 0xf7, 0xfffffffffffffff9, 0x2, 0x3e, 0xd0, 0x2ee, 0x40, 0x15b, 0x7fff, 0x2, 0x38, 0x2, 0x8, 0x9, 0xffff}, [{0x60000000, 0x8001, 0x4, 0x4, 0x100000001, 0x9, 0x0, 0x8}, {0x1, 0x5, 0x12, 0x8001, 0x2, 0x80000000, 0x3, 0x1fcd}], "848464fcf00293115694ef81c84820d91bcfe1f07f1b64028035d284ebab49", [[], [], [], [], [], [], [], [], [], []]}, 0xacf) openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) 19:59:00 executing program 3: r0 = socket(0x10, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0), 0x4) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000440)) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x92200, 0x0) bind(r2, &(0x7f0000000380)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:59:01 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x0, 0x7, 0x5}) r1 = socket(0x10, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e23, 0x20000, @loopback, 0xcc2}, @in={0x2, 0x4e22, @empty}, @in={0x2, 0x4e23, @local}], 0x4c) [ 762.735995][T24463] IPVS: ftp: loaded support on port[0] = 21 19:59:01 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r1, 0x0, 0x30000c) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/118, 0x76}], 0x1, &(0x7f0000000180)=""/103, 0x67}, 0x40010100) 19:59:01 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x0, 0x7, 0x5}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x20000880) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0x19000}) [ 763.206178][ T35] audit: type=1326 audit(1608580741.568:185): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=24490 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460faa code=0x0 [ 763.248280][T24423] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 763.741440][T24463] netlink: 'syz-executor.3': attribute type 4 has an invalid length. 19:59:02 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000040)={0x1, 0x6000000}) 19:59:02 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, &(0x7f0000000080)={0x2000, 0x100000, 0x7, 0x6, 0x6}) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x0, 0x7, 0x5}) 19:59:02 executing program 5: r0 = socket(0x10, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0), 0x4) unshare(0x40000000) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000380)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:59:02 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() rt_sigtimedwait(0x0, 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x30000c) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/118, 0x76}], 0x1, &(0x7f0000000180)=""/103, 0x67}, 0x40010100) 19:59:02 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x0, 0x7, 0x5}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x20000880) r2 = socket(0x10, 0x0, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) sendmsg$NL80211_CMD_NEW_MPATH(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x7c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4040}, 0x84) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r1, 0x8008f511, &(0x7f0000000080)) 19:59:02 executing program 0: r0 = socket(0x10, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600)='nl80211\x00') sendmsg$NL80211_CMD_SET_WOWLAN(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001dc0)={0x30, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x2}}}}}, 0x30}}, 0x0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, r2, 0x100, 0x70bd2c, 0x0, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x40408c4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r3 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r3, 0x4600, &(0x7f0000000040)={0x0, 0x7}) r4 = socket(0x10, 0x0, 0x0) write(r4, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000b00)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f0000000f00)=ANY=[@ANYRES32, @ANYRESDEC=r5]) ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000080)={r5, 0x1, 0x0, [0x1800000000, 0x1ff, 0x3, 0x4, 0x2], [0x3, 0x0, 0x7fffffff, 0xd7, 0x100000001, 0x4, 0x7fffffff, 0x440, 0x3, 0x8, 0x8000, 0x3f, 0x0, 0x8, 0xffffffffffffffff, 0x80000001, 0x60000000, 0x0, 0x0, 0x42e9, 0x5, 0x0, 0x1, 0x9, 0x7fffffff, 0x81, 0x100, 0xae, 0x1ff, 0x8, 0x8, 0x1, 0x0, 0x6, 0xfffffffffffffff8, 0xbb, 0x401, 0xf62b, 0x7fffffff, 0x0, 0x2, 0xfffffffffffffff9, 0x40000000, 0x9, 0x1, 0xffffffffffff0001, 0x7f, 0x9, 0x4, 0xff, 0x83d, 0xffff, 0x0, 0x5, 0x2, 0x7, 0xffffffff, 0xe346, 0x7, 0x3, 0x0, 0x7, 0x5, 0x800, 0x1, 0x7f, 0x800000000, 0x0, 0x8, 0x5a6f4c4e, 0xc8d, 0x400, 0xfffffffffffffff7, 0x35ad, 0x0, 0x5, 0x6, 0x9, 0x7f, 0x778, 0xc8b, 0x800, 0x0, 0x9, 0x8000000000000000, 0xb9, 0x100, 0x3, 0x3, 0x5, 0x400, 0x4, 0xd, 0xfffffffffffffffb, 0x9, 0x7, 0x1f, 0x6bba, 0x8, 0x9, 0xffffffffffffff00, 0xffff, 0x101, 0x5, 0xfffffffffffffffc, 0x7, 0x4, 0x0, 0x1000, 0x100000000, 0x8, 0x91, 0x0, 0x3, 0x563, 0x2, 0x3f, 0x7, 0x3, 0x4800, 0x6]}) [ 764.357197][ T35] audit: type=1326 audit(1608580742.718:186): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=24511 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460faa code=0x0 [ 764.359394][T24512] IPVS: ftp: loaded support on port[0] = 21 [ 764.402922][T24517] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 19:59:02 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x0, 0x7, 0x5}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x20000880) r2 = socket(0x10, 0x0, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) sendmsg$NL80211_CMD_NEW_MPATH(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x7c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4040}, 0x84) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r1, 0x8008f511, &(0x7f0000000080)) 19:59:02 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x4600, &(0x7f0000000040)={0x0, 0x7}) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 19:59:03 executing program 1: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0xa0300, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f00000000c0)=""/10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000035c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', r3, &(0x7f0000003540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001700)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001240)={&(0x7f0000000640)=ANY=[@ANYBLOB="2fd685e4f0a7", @ANYRES16=r4, @ANYBLOB="200026bd70002600070e0073797374656d5f753a6f626a6563745f723a617574685f63616368653a733000006e6574646550e02c7436000000050001000000000001cf7cde482d7b06e40000ffffe0000001000000000000000000000000006480640b9a48fc3a3207381aa4b64c429a2c46925e259fc74d3e06e7f0b22d31aa5989298eb3a26f78f7917c184958c33371df6b8fe6f69c58f6aec684489605ea3d33a4f97e109b7193c49f78c3cd292566438760435cf0728986d24901e3c1c3c6583da672453ee79d913f375653db90a81a36345c9f3aedfc46b2dfed19dcb8e6"], 0x74}, 0x1, 0x0, 0x0, 0x815}, 0x20004811) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="44001be0d1de0a1f11256b3c65", @ANYRES16=r4, @ANYBLOB="00032cbd7000fbdbdf250700000005000100010000002700070073797374656d5f753a6f626a6563745f723a7061737377645f657865635f743a73300000"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x5) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000400)=ANY=[@ANYBLOB="adbf9f004a7b937e2f98802ab5d423d6697f0fab7487ae345253b5af0d35c0f435649242aa52e460142dc08438780458bc5d9096be0093adf50f550c4df5a90955c9dcc1208f2fd1877b6c24991e18d38037ac3e1714d797cd9b06b197450d12eec43a75808158095a383141f062d996c63df869", @ANYRES16=r4, @ANYBLOB="000126bd700003dbdf2501000000010000000000000048f57fdbac020000000000000032dd2970e0083b817620f076371f78a5532c750ba94904e68badac8bc8d7a916f5bcbd95297671d673520194c830c9327756944ac3b5918889606cf3832dfe19425722ead4698169c663e2ade9ef292c255bb55b6fe4ec215b5dba17979c17d64a2079a8451f452bdd9a452294fa07f51f0b644ba03a02c646bcd53613d0d59c71cc124a18270d23db65d01262dccdf71be54e6010f550f7f12563c1f36336e56360e07c8137d1cf306eba7886c9cf6394feebd3ee5f9bbca19b4a986bc7edc319671b2f90048276a26725e10f3e1d7ac9c659c34084000000000000002415af550fdfd1858eaf49f3ddc7e2120bcd9d9273738402a376415ca2faabfcc3c4259967730102b3bb402373a18faee15a03f0e5c34943fd002d2ecad882a1696d585b115c7767bef88f8000b26d9544f098d514870141f4a05f72d83c7c3c61bbf29bf9c856048b4825e77cabfea59f8b040a2255e31587c71b327ee2a5cb013952ad7351"], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x11) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000002180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002140)={&(0x7f00000020c0)={0x4c, r4, 0x400, 0x70bd29, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000844) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xffffffffffffff7c, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r4, 0x100, 0x270bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x48004}, 0x20000884) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r4, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}]}, 0x44}, 0x1, 0x0, 0x0, 0x40010}, 0x40) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000000100)=0x8) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, &(0x7f0000000040)={0x0, 0x7, 0x5}) r5 = socket$nl_rdma(0x10, 0x3, 0x14) fcntl$F_SET_FILE_RW_HINT(r5, 0x40e, &(0x7f0000000080)) 19:59:03 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) pwritev2(r0, 0x0, 0x0, 0x0, 0x0, 0x0) getpid() r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x4600, &(0x7f0000000040)={0x0, 0x7}) 19:59:03 executing program 5: r0 = socket(0x10, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0), 0x4) unshare(0x40000000) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000380)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:59:03 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5) r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x4) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000080)={0x0, 0x80000000, 0x5}) [ 765.139544][T24562] IPVS: ftp: loaded support on port[0] = 21 [ 765.181222][T24566] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 19:59:04 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000040)={0x1, 0x7000000}) 19:59:04 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xff, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x2c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) ioctl$PPPIOCGFLAGS(r0, 0x8004745a, &(0x7f00000000c0)) getpid() r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000040)={0x0, 0x7, 0x5}) 19:59:04 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() rt_sigtimedwait(0x0, 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x30000c) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/118, 0x76}], 0x1, &(0x7f0000000180)=""/103, 0x67}, 0x40010100) 19:59:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5) r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x4) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000080)={0x0, 0x80000000, 0x5}) 19:59:04 executing program 0 (fault-call:9 fault-nth:0): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 19:59:04 executing program 5: r0 = socket(0x10, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0), 0x4) unshare(0x40000000) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000380)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) [ 766.023750][ T35] audit: type=1800 audit(1608580744.378:187): pid=24599 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15695 res=0 errno=0 [ 766.052149][T24599] FAULT_INJECTION: forcing a failure. [ 766.052149][T24599] name failslab, interval 1, probability 0, space 0, times 0 [ 766.057696][T24600] IPVS: ftp: loaded support on port[0] = 21 [ 766.077408][T24605] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 766.131474][ T35] audit: type=1800 audit(1608580744.408:188): pid=24599 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15695 res=0 errno=0 [ 766.145138][T24599] CPU: 0 PID: 24599 Comm: syz-executor.0 Not tainted 5.10.0-syzkaller #0 [ 766.159338][T24599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 766.169446][T24599] Call Trace: [ 766.172755][T24599] dump_stack+0x107/0x163 [ 766.177119][T24599] should_fail.cold+0x5/0x1f [ 766.181993][T24599] ? alloc_pipe_info+0x13f/0x5c0 [ 766.186989][T24599] ? alloc_pipe_info+0x13f/0x5c0 [ 766.191957][T24599] should_failslab+0x5/0x10 [ 766.196497][T24599] kmem_cache_alloc_trace+0x55/0x260 [ 766.201837][T24599] alloc_pipe_info+0x13f/0x5c0 [ 766.206640][T24599] splice_direct_to_actor+0x779/0x980 [ 766.212055][T24599] ? generic_file_splice_read+0x6c0/0x6c0 [ 766.217802][T24599] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 766.224189][T24599] ? apparmor_file_permission+0x2a0/0x560 [ 766.229943][T24599] ? do_splice_to+0x170/0x170 [ 766.234642][T24599] ? security_file_permission+0x248/0x560 [ 766.240427][T24599] do_splice_direct+0x1b3/0x280 [ 766.245305][T24599] ? splice_direct_to_actor+0x980/0x980 [ 766.250896][T24599] do_sendfile+0x561/0x10b0 [ 766.255441][T24599] ? do_pwritev+0x270/0x270 [ 766.259972][T24599] ? wait_for_completion_io+0x260/0x260 [ 766.265554][T24599] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 766.271829][T24599] ? vfs_write+0x18e/0xa80 [ 766.276302][T24599] __x64_sys_sendfile64+0x1cc/0x210 [ 766.278137][ T35] audit: type=1326 audit(1608580744.438:189): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=24597 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460faa code=0x0 [ 766.281528][T24599] ? __ia32_sys_sendfile+0x220/0x220 [ 766.281568][T24599] ? syscall_enter_from_user_mode+0x1d/0x50 [ 766.281607][T24599] do_syscall_64+0x2d/0x70 [ 766.317455][T24599] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 766.323413][T24599] RIP: 0033:0x45e149 [ 766.327341][T24599] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 766.347619][T24599] RSP: 002b:00007f47f8f07c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 766.356078][T24599] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e149 [ 766.364092][T24599] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 766.372082][T24599] RBP: 00007f47f8f07ca0 R08: 0000000000000000 R09: 0000000000000000 19:59:04 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) accept4$phonet_pipe(r0, &(0x7f00000000c0), &(0x7f0000000100)=0x10, 0x80000) getpid() fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x105101, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000040)={0x0, 0x7, 0x5}) r2 = getpid() sched_setscheduler(r2, 0x0, 0x0) syz_open_procfs(r2, &(0x7f0000000080)='net/ip_tables_matches\x00') 19:59:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5) r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x4) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000080)={0x0, 0x80000000, 0x5}) [ 766.380076][T24599] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 0000000000000000 [ 766.388068][T24599] R13: 00000000016afb7f R14: 00007f47f8f089c0 R15: 000000000119bf8c 19:59:05 executing program 5: r0 = socket(0x10, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000380)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:59:05 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000040)={0x1, 0x6000000}) 19:59:05 executing program 1: r0 = socket(0x10, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000040)={0x0, 0x7, 0x5}) 19:59:05 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() rt_sigtimedwait(0x0, 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x30000c) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/118, 0x76}], 0x1, &(0x7f0000000180)=""/103, 0x67}, 0x40010100) [ 766.954424][ T35] audit: type=1326 audit(1608580745.308:190): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=24648 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460faa code=0x0 19:59:05 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000040)={0x1, 0x8000000}) 19:59:05 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x1, 0xffffffffffff8945}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}, 0x0, 0xe, 0xffffffffffffffff, 0x0) getpid() r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) r2 = epoll_create1(0x0) fcntl$lock(r2, 0x6, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x3}) fcntl$getownex(r2, 0x24, &(0x7f000045fff8)) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000040)={0x0, 0x7, 0x5}) r3 = syz_open_dev$vcsu(&(0x7f0000000180)='/dev/vcsu#\x00', 0x81, 0x40) perf_event_open$cgroup(&(0x7f0000000100)={0x2, 0x70, 0x1, 0x81, 0x0, 0x0, 0x0, 0xe7, 0x200, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000080), 0x5}, 0xc606136ddae41949, 0x2b, 0x7, 0x5, 0x3e3f, 0x3, 0x8}, r3, 0x5, r0, 0x3) 19:59:05 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) [ 767.396373][T24642] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 767.525584][ T35] audit: type=1800 audit(1608580745.878:191): pid=24668 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15695 res=0 errno=0 19:59:06 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) accept4$phonet_pipe(r0, &(0x7f00000000c0), &(0x7f0000000100)=0x10, 0x80000) getpid() fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x105101, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000040)={0x0, 0x7, 0x5}) r2 = getpid() sched_setscheduler(r2, 0x0, 0x0) syz_open_procfs(r2, &(0x7f0000000080)='net/ip_tables_matches\x00') 19:59:06 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x6000, 0x0) write$char_raw(r0, &(0x7f0000000200)={"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"}, 0x4800) r1 = getpid() sched_setscheduler(r1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r2 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, &(0x7f0000000040)={0x0, 0x7, 0x5}) [ 767.687276][ T35] audit: type=1800 audit(1608580746.008:192): pid=24668 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15695 res=0 errno=0 19:59:06 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8) ptrace$setopts(0x4206, r1, 0x0, 0x30000c) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/118, 0x76}], 0x1, &(0x7f0000000180)=""/103, 0x67}, 0x40010100) 19:59:06 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) accept4$phonet_pipe(r0, &(0x7f00000000c0), &(0x7f0000000100)=0x10, 0x80000) getpid() fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x105101, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000040)={0x0, 0x7, 0x5}) r2 = getpid() sched_setscheduler(r2, 0x0, 0x0) syz_open_procfs(r2, &(0x7f0000000080)='net/ip_tables_matches\x00') 19:59:06 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r1, &(0x7f00000000c0), 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./file0\x00', 0x19) 19:59:06 executing program 5: r0 = socket(0x10, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000380)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:59:06 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x20, 0x0, 0x0, 0x0, 0x0, 0x45c0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x3f) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x101800, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@cgroup, 0xffffffffffffffff, 0x14, 0x1, r2}, 0x14) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000040)={0x0, 0x7, 0x5}) socketpair(0x1e, 0x2, 0x8, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000000d0a0108000000000000000002000007080004400000003df38795302139df7e3f3369e9044c83000800044099e28fc226f545d56dcd97b9d0fc6aff54fccb521045c89bbc4c8a1552931afb56a8a62b8a635830af25a4acfccb4be85f46f5629cdf8de7acc910b200197a77a2ed5fd71d2db5bcdfda4c3353d0f411"], 0x30}, 0x1, 0x0, 0x0, 0x4046000}, 0x40040) [ 768.092823][ T35] audit: type=1326 audit(1608580746.448:193): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=24682 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460faa code=0x0 19:59:06 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) accept4$phonet_pipe(r0, &(0x7f00000000c0), &(0x7f0000000100)=0x10, 0x80000) getpid() fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x105101, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000040)={0x0, 0x7, 0x5}) r2 = getpid() sched_setscheduler(r2, 0x0, 0x0) syz_open_procfs(r2, &(0x7f0000000080)='net/ip_tables_matches\x00') [ 768.187218][ T35] audit: type=1800 audit(1608580746.498:194): pid=24691 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15695 res=0 errno=0 19:59:06 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) prctl$PR_GET_NAME(0x10, &(0x7f0000000280)=""/130) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) read$FUSE(r2, &(0x7f0000000500)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r2, &(0x7f00000000c0)={0x18, 0x0, r3}, 0x18) creat(&(0x7f0000000040)='./bus\x00', 0x0) [ 768.276742][ T35] audit: type=1800 audit(1608580746.498:195): pid=24691 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15695 res=0 errno=0 [ 768.422526][ T35] audit: type=1800 audit(1608580746.538:196): pid=24695 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15695 res=0 errno=0 [ 768.525661][ T35] audit: type=1800 audit(1608580746.548:197): pid=24695 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15695 res=0 errno=0 [ 768.556933][ T35] audit: type=1800 audit(1608580746.908:198): pid=24703 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15695 res=0 errno=0 [ 768.606485][ T35] audit: type=1800 audit(1608580746.948:199): pid=24703 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15695 res=0 errno=0 [ 768.714548][ T35] audit: type=1800 audit(1608580747.068:200): pid=24704 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15695 res=0 errno=0 19:59:07 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000040)={0x1, 0xff000000}) 19:59:07 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3ff, 0x8c}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000080)={0x0, 0x5b, 0x1000}, &(0x7f00000000c0)={'enc=', 'raw', ' hash=', {'sha224\x00'}}, &(0x7f0000000140)="7c52d210a6884e5177f8d047314139365936e2ce6287578af6f11588e1bb4b12247231d739cb9ef64e7a2c9c481db2b1d6ae6aefafa8804c1273ce91f8d9f21124fb6387ecaa0307783cd9ec8eac4b04dc2c57563ba2b5ef8f2532", &(0x7f00000001c0)=""/4096) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x0, 0x7, 0x5}) r1 = socket(0x10, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) fcntl$notify(r1, 0x402, 0x3c) 19:59:07 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8) ptrace$setopts(0x4206, r1, 0x0, 0x30000c) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/118, 0x76}], 0x1, &(0x7f0000000180)=""/103, 0x67}, 0x40010100) 19:59:07 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) keyctl$chown(0x4, 0x0, 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, 0x0) stat(&(0x7f00000001c0)='./file1\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) r8 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(r8, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='system.posix_acl_access\x00', &(0x7f0000000900)=ANY=[@ANYBLOB="02000000010005000000000002000500", @ANYRES32=0x0, @ANYBLOB="02000500", @ANYRES32=0xee00, @ANYBLOB="0400020000000000080001007bc5815a5ff8c1e454f8a90f76948993313835c835ef3dbb47cad89f673757f8ef41f3912845737c26dde6f51e80b0c6e45f2eb0791d7a0bc86ce05fc05af809954163edafd0f268dfaeeaa43bf19f15ddac84a3a980125a209783c69444398dfab034b0a620be2107ad341a00ffaa18c61710cc09e2b956d2e9a8215b24965583a547d612cdf62fb105bb006ce35416cb7d0f96b2c4c59dc4be0e66d1b71394787fb9c1d97274df4a14c51d1b", @ANYRES32, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0xee01, @ANYBLOB="08000200", @ANYRES32=r9, @ANYBLOB="08000200", @ANYRES32=0xee00, @ANYBLOB="10000600000000002000040000000000"], 0x6c, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000a40)={0x3e8, 0x0, 0x0, [{{0x1, 0x3, 0x5, 0x2, 0x10000000, 0xffffffff, {0x3, 0xfffffffffffffffb, 0x0, 0x7, 0x20000000000003, 0x8, 0x2, 0x1, 0x2, 0x2000, 0xffff, 0x0, r6, 0xffff, 0x9}}, {0x5, 0xec5e, 0x4, 0x0, 'u32\x00'}}, {{0x6, 0x0, 0x3, 0xfffffffffffffbf6, 0xfffffffd, 0xff, {0x3, 0x58, 0x3ff, 0x7fffffff, 0x8, 0x4, 0x81, 0x8001, 0x5, 0x2000, 0x5, 0xee01, 0x0, 0x2, 0x8}}, {0x6, 0x6, 0x9, 0x80000001, 'ip6_vti0\x00'}}, {{0x6, 0x1, 0x4000000, 0x7fffffff, 0x9, 0x2, {0x6, 0x6, 0x57, 0x80000001, 0x4, 0x9, 0x3, 0x8, 0x3f, 0xa000, 0x2, r7, 0xee01, 0xf56, 0x1}}, {0x5, 0x0, 0x9, 0x301, 'ip6_vti0\x00'}}, {{0x2, 0x2, 0x10001, 0x193, 0x7, 0x200, {0x0, 0x8, 0x20, 0x4, 0x100, 0x9, 0x20, 0x80000000, 0xa2, 0x1000, 0x7ff, 0xffffffffffffffff, r9, 0x2c, 0x1}}, {0x2, 0xc55, 0x4, 0x8, 'u32\x00'}}, {{0x0, 0x2, 0x0, 0x3000, 0x3, 0x0, {0x6, 0x9, 0x1, 0x398, 0x89ba, 0x8, 0x6, 0x3f, 0x158, 0x1000, 0xc3c6, 0xee00, 0xee00, 0xffffdcc5, 0x8000}}, {0x6, 0x100000001, 0x9, 0x3dc5, 'ip6_vti0\x00'}}, {{0x3, 0x0, 0x4, 0xc3db, 0x7959, 0x800, {0x4, 0x1, 0x10000, 0x3, 0x0, 0x2, 0x1f, 0x369, 0x10001, 0xc000, 0x7, 0xee01, 0xffffffffffffffff, 0x2, 0x2}}, {0x2, 0x7, 0x4, 0xea2, 'u32\x00'}}]}, 0x3e8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYBLOB='Y\x00\x00\v\x00\x009j\x00\x00\x00\x00\x00\x00P\x00\x00d\x00\x00', @ANYRES32=r3, @ANYBLOB="00000000000000000d00000008000100753332002c000200140008006970365f767469300000000000000000140005000000000000000000000000000000000051689c495074674822a2939e325df1061b0984b044be3b29b1084a8267"], 0x58}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x4924924924926d3, 0x0) 19:59:07 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f00000000c0)="2100bb3b354d4795c2b81425c1151a80ae840b1b8f68618402eacdf9a46cd686b147790300f928ce70d1f86b857426f6775c9166d5f5497f6b37d8f51845783023a982db3b2bb68674e1da0f6826ed6dd250e7e6c5a5cf", 0x57) sendfile(r0, r2, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) [ 768.936835][T24694] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 768.984549][T24712] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 19:59:07 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x20, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)=0x1) getsockname(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000140)=0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000200)={0x9, 0x7, 0x2, 0x7, 0x3, 0x6}) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000180)={{0x2, @rand_addr=0x64010100, 0x4e23, 0x0, 'wrr\x00', 0x20, 0x6, 0x4f}, {@remote, 0x4e20, 0x10000, 0x3f, 0x1, 0x9}}, 0x44) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f00000003c0)={0x14, &(0x7f0000000240)={0x20, 0x8, 0x59, {0x59, 0x10, "d0ada0cc260af74d30db3dfbbdb5ae6b5898dbbd38eb81414de147c86159d236e5356f39fad30f792b3c39c248ac6d668f7a428b12fd99a40df8e4349aa69a7c9c7d813894ac6aa941249fea88a8e399253f5c6ba95682"}}, &(0x7f00000002c0)={0x0, 0x3, 0xef, @string={0xef, 0x3, "669a182793a5f31496a25aea877b332b7767a569143956fc5d9ba334e8e3218743343334dba4f6949f2b1aaf9ed70a8dc2d4cc6c11e14bf450c5fe566835a2ad6ed7cb21178254eee60205d36899249acfc367f8bde061d8ae4cfe1ce34d1e36b4e6a50cf12ac321e52aef18d95d701256f360e9a88ffa28bddefc9f45b488f4feae270c9e9522ed0ef7b35c87599763ceae3c150f3c58dcf352ac5ad58f7481a37ae67feeb4bdc467d9f7c7f82cc3c3086cd290e59158f07a3d42567a723b59933b30513f37108c0b20bb47a8e7d66eb99a86ba5923a8ef8e76c517c5747e857c8c26a5f233221a8b2a4e2075"}}}, &(0x7f00000006c0)={0x44, &(0x7f0000000400)={0x0, 0x0, 0xea, "849bd4dbf293aa406e00a0371e5044707a5f4b2d76f7279d0e1bdc9a9b63346f3be7ed248fe4dbcb2e94987ef71a6b53262b7bce3444aa5138ce774389be8458e447d7e82494fd50e2ebdcd2d6c7d307f80cf7cce1d6a7264b0faa2a8bccb5575b34808f4ede6b1e5a64a9de9ff6777cc09fc1dfaa3116f899db7dd7364bb2a49ca95c411225261bec18470da9fe065cb163dda2b1758774c911c7c4f0fd46886c3694da83fce2eaedc01d0adc15bec9f910841ebb537a0d5190a0dec099e0d15fc6af17db1385f2eb338d469407d11b9c28ff208442b425196dcf914d1dba349f5c26665f64b55a57c0"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x9b}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x20}, &(0x7f0000000580)={0x20, 0x81, 0x1, "b7"}, &(0x7f00000005c0)={0x20, 0x82, 0x3, '?R4'}, &(0x7f0000000600)={0x20, 0x83, 0x1, "b6"}, &(0x7f0000000640)={0x20, 0x84, 0x2, "b000"}, &(0x7f0000000680)={0x20, 0x85, 0x3, "308e68"}}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x0, 0x7, 0x5}) 19:59:07 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000088060400ff000000000000a33300058001000700"], 0x1c}}, 0x20000880) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f00000000c0)={0x7ff, 0x8}) r1 = socket$inet6(0xa, 0x2, 0x0) close(r1) open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x8000, 0x0) write$sndseq(r2, &(0x7f0000000280)=[{0x4, 0x0, 0x5, 0x2, @tick=0xa20, {0x0, 0x81}, {0x7f, 0x8e}, @time=@time={0x80, 0x5}}, {0x81, 0x20, 0x4, 0x8, @tick=0x5, {0xa3, 0x81}, {0x7, 0x6}, @note={0x1, 0x9, 0x89, 0x3f, 0x80}}, {0x3f, 0x8, 0x2, 0xe9, @tick=0x10001, {0x80, 0x2}, {0x80, 0x8}, @raw32={[0x0, 0x5603, 0x1f]}}, {0x0, 0x7, 0xd4, 0xff, @tick=0xc2, {0xff, 0x9}, {0x0, 0x4f}, @note={0x1, 0x5, 0x8, 0x7f, 0x9}}, {0x88, 0x40, 0x40, 0x4, @time={0xffffffff, 0x401}, {0xe1, 0x3f}, {0x9, 0x40}, @raw8={"3e5f0e8069be0f14bad0814d"}}, {0xdd, 0x1, 0xf7, 0xff, @tick=0x1ff, {0x2, 0x5}, {0x81, 0x8}, @time=@time={0x6, 0xff}}, {0x6e, 0x8, 0x3c, 0x50, @tick=0x5, {0x0, 0x80}, {0xff, 0x4}, @addr={0x0, 0x5}}, {0x64, 0x6e, 0x80, 0x7f, @time={0x8}, {0x0, 0x5}, {0x7, 0x9}, @result={0x2, 0x101}}, {0x3f, 0x6, 0xe1, 0x80, @time={0x3d3f, 0x1}, {0x20, 0x7}, {0x5, 0xaf}, @time=@time={0x8f, 0x3}}, {0x40, 0x80, 0x0, 0x2, @time={0x5, 0x6}, {0x20, 0x40}, {0x1}, @raw8={"8ef17a22b9b9bcae09ec108a"}}], 0x118) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000200)={r1, 0x2, 0x0, 0x4}) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x5b}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x81}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x200000c0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x100) sendfile(r1, r4, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 19:59:07 executing program 5: r0 = socket(0x10, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000380)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) [ 769.329056][T24712] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 19:59:07 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000040)={0x1, 0x100000000000000}) 19:59:08 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) linkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000100)='./bus\x00', 0x400) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp1\x00', 0x200000, 0x0) fcntl$setsig(r0, 0xa, 0x15) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x40002) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f0000000300)=0x93) read(r2, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, 0x0) pwrite64(r1, &(0x7f0000000180)="5478b4c6c76215e1cc0b86529db525a6e431", 0x12, 0x8) close(r1) write$sndseq(0xffffffffffffffff, &(0x7f0000000340)=[{0x2, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x80, 0x42, 0x7, 0x3, @tick=0xffffffff, {0xd8, 0x5}, {0xdb, 0x1}, @time=@tick=0x2f}, {0x8, 0x39, 0x1, 0x3f, @time={0xfff, 0x5}, {0x4, 0x4}, {0x4, 0x7}, @queue={0x80, {0x0, 0x68}}}, {0x8, 0x7, 0xf6, 0x1f, @time={0x101, 0x8}, {0x3f, 0xe0}, {0xe4, 0x2}, @connect={{0x7f, 0xe0}, {0x8, 0xff}}}], 0x70) r3 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r1, r3, 0x0, 0x80001d00c0d0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r3, 0x80083314, &(0x7f0000000280)) creat(&(0x7f0000000040)='./bus\x00', 0x0) 19:59:08 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8) ptrace$setopts(0x4206, r1, 0x0, 0x30000c) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/118, 0x76}], 0x1, &(0x7f0000000180)=""/103, 0x67}, 0x40010100) 19:59:08 executing program 3: clone(0x40042100, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000002c0)) r2 = dup(0xffffffffffffffff) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r3, @ANYBLOB="040027bd7000e4dbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b001579800b25ee03a4cc91b0aef88f95244af8ff06e37d6dc096e13063", @ANYRES32=r1, @ANYBLOB="0e0001006e657464657673696d0000000f0002006e657464657673696d30000008008c0001000000060001006e657464657673696d0000000f0002006e657464657673696d30000008008a00", @ANYRES32=r2, @ANYBLOB], 0x8c}, 0x1, 0x0, 0x0, 0x20000800}, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xa0, r3, 0x608, 0x70bd2b, 0x25dfdbfb, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}, {0x6, 0x11, 0x9}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1000}, {0x6, 0x11, 0x6}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}, {0x6}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x48000}, 0x1) 19:59:08 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x20810, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x0, 0x7, 0x5}) [ 769.909750][T24751] IPVS: ftp: loaded support on port[0] = 21 19:59:08 executing program 1: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x41c0, 0x0, 0x640e0dfa6a37c138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffffe}, 0x0, 0x2, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x0, 0x7, 0x5}) 19:59:08 executing program 1: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ocfs2_control\x00', 0x2a340, 0x0) read$usbmon(r0, &(0x7f00000000c0)=""/247, 0xf7) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40841, 0x9, 0x1, 0x0, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x200800, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') r1 = memfd_create(&(0x7f0000000380)='se\x00u\x80ity\xaeselintx\x00', 0x0) pwrite64(r1, &(0x7f000003bfff)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0) chdir(&(0x7f0000000180)='./file0\x00') symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') umount2(&(0x7f00000005c0)='./file0/../file0\x00', 0x0) rmdir(&(0x7f0000000080)='./file1\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00000001c0)={0x0, 0x2f63}, &(0x7f0000000240)=0x18) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000280)={r2, 0x7f, 0x2, 0x1, 0xd2, 0x1e7}, 0x14) r3 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r3, 0x40189429, &(0x7f0000000040)={0x0, 0x7, 0x5}) 19:59:08 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000280)="634421b8315eb9850dc3964400ada5c94e471149e5534d828f422425d1fafaf3e61562d3f41203460800b40aeb7b5c66556546402a5567de4dc2705e63b86e2a1c37fbd3578531aeb1cdae4fe29c8f04b4fcc1cf1339b5c3683a097a09a35cd12d12516553c0e310e847bc19dead942d8ec6f90d919fd58a7bf826844c8fad27cbb068ee56", 0x85) r1 = open(&(0x7f0000000340)='./bus/file0\x00', 0x65142, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000114}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)={0x14, 0x0, 0x700, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}}, 0x14}}, 0x4) creat(&(0x7f0000000040)='./bus\x00', 0x0) 19:59:08 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xd0, 0x0, 0x0, 0x41c0, 0x80010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x5, 0x20, 0x0, 0x5, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x0, 0x7, 0x5}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x2, 0x3, 0x7) accept$inet6(r2, &(0x7f00000021c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000002200)=0x1c) futimesat(r2, &(0x7f0000002240)='./file0\x00', &(0x7f0000002280)={{0x0, 0x2710}, {0x0, 0xea60}}) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000002140)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2a}}, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x14, 0x0, 0x0, 0x0, 0x2, &(0x7f0000002100)='lo\x00', 0x4, 0x4, 0x7}) ioctl$SNAPSHOT_S2RAM(r2, 0x330b) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000000080)={{0x0, 0x0, 0x80}}) 19:59:08 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r0 = socket(0x10, 0x0, 0x0) sched_yield() write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth1_virt_wifi\x00'}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r1 = socket$inet6(0xa, 0x400000000001, 0x80) close(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r2, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r3 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r1, r3, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) [ 770.560623][T24740] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 19:59:09 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0xffffffffffffffff, r1, 0x0, 0x30000c) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/118, 0x76}], 0x1, &(0x7f0000000180)=""/103, 0x67}, 0x40010100) 19:59:09 executing program 5: r0 = socket(0x10, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000380)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) [ 770.991039][T24751] IPVS: ftp: loaded support on port[0] = 21 [ 771.051650][T24815] IPVS: ftp: loaded support on port[0] = 21 [ 771.702943][T24815] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 19:59:10 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000040)={0x1, 0x200000000000000}) 19:59:10 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) r1 = socket(0x10, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) sendmsg$NL80211_CMD_RADAR_DETECT(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, 0x0, 0x400, 0x70bd28, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x23}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3b1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x161c}]}, 0x54}, 0x1, 0x0, 0x0, 0x40080}, 0x84) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x0, 0x7, 0x5}) 19:59:10 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0xffffffffffffffff, r1, 0x0, 0x30000c) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/118, 0x76}], 0x1, &(0x7f0000000180)=""/103, 0x67}, 0x40010100) 19:59:10 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) linkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000100)='./bus\x00', 0x400) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp1\x00', 0x200000, 0x0) fcntl$setsig(r0, 0xa, 0x15) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x40002) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f0000000300)=0x93) read(r2, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, 0x0) pwrite64(r1, &(0x7f0000000180)="5478b4c6c76215e1cc0b86529db525a6e431", 0x12, 0x8) close(r1) write$sndseq(0xffffffffffffffff, &(0x7f0000000340)=[{0x2, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x80, 0x42, 0x7, 0x3, @tick=0xffffffff, {0xd8, 0x5}, {0xdb, 0x1}, @time=@tick=0x2f}, {0x8, 0x39, 0x1, 0x3f, @time={0xfff, 0x5}, {0x4, 0x4}, {0x4, 0x7}, @queue={0x80, {0x0, 0x68}}}, {0x8, 0x7, 0xf6, 0x1f, @time={0x101, 0x8}, {0x3f, 0xe0}, {0xe4, 0x2}, @connect={{0x7f, 0xe0}, {0x8, 0xff}}}], 0x70) r3 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r1, r3, 0x0, 0x80001d00c0d0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r3, 0x80083314, &(0x7f0000000280)) creat(&(0x7f0000000040)='./bus\x00', 0x0) 19:59:10 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x25) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 19:59:10 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x0, 0x7, 0x5}) r1 = socket(0x10, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) fcntl$setflags(r1, 0x2, 0x0) 19:59:10 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0xffffffffffffffff, r1, 0x0, 0x30000c) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/118, 0x76}], 0x1, &(0x7f0000000180)=""/103, 0x67}, 0x40010100) 19:59:10 executing program 5: socket(0x10, 0x0, 0x0) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000380)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) [ 772.548455][ T35] kauditd_printk_skb: 19 callbacks suppressed [ 772.548473][ T35] audit: type=1800 audit(1608580750.908:220): pid=24882 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15695 res=0 errno=0 [ 772.606754][T24884] IPVS: ftp: loaded support on port[0] = 21 [ 772.687164][ T35] audit: type=1800 audit(1608580750.948:221): pid=24882 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15695 res=0 errno=0 19:59:11 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, 0x0, 0x0, 0x30000c) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/118, 0x76}], 0x1, &(0x7f0000000180)=""/103, 0x67}, 0x40010100) 19:59:11 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() syz_open_procfs(r0, &(0x7f0000000080)='attr\x00') r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000040)={0x0, 0x7, 0x5}) 19:59:11 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket(0x10, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0, 0x7}, 0x8) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r2, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x2, 0x0, 0x1f, 0x6, @tick=0x9, {0x2, 0x9}, {0x7}, @note={0x1, 0x3, 0x3, 0x6}}], 0x38) r3 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r1, r3, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) [ 772.851076][ T35] audit: type=1326 audit(1608580750.958:222): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=24887 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460faa code=0x0 [ 772.966629][ T35] audit: type=1800 audit(1608580751.078:223): pid=24890 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15695 res=0 errno=0 19:59:11 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, 0x0, 0x0, 0x30000c) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/118, 0x76}], 0x1, &(0x7f0000000180)=""/103, 0x67}, 0x40010100) [ 773.055636][ T35] audit: type=1800 audit(1608580751.078:224): pid=24890 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15695 res=0 errno=0 [ 773.194666][ T35] audit: type=1800 audit(1608580751.208:225): pid=24909 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15765 res=0 errno=0 [ 773.298002][ T35] audit: type=1326 audit(1608580751.268:226): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=24916 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460faa code=0x0 [ 773.378807][ T35] audit: type=1800 audit(1608580751.478:227): pid=24925 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15695 res=0 errno=0 [ 773.450589][ T35] audit: type=1800 audit(1608580751.488:228): pid=24925 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15695 res=0 errno=0 [ 773.518964][ T35] audit: type=1800 audit(1608580751.518:229): pid=24925 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15695 res=0 errno=0 [ 773.526319][T24884] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 19:59:12 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000040)={0x1, 0x300000000000000}) 19:59:12 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) linkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000100)='./bus\x00', 0x400) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp1\x00', 0x200000, 0x0) fcntl$setsig(r0, 0xa, 0x15) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x40002) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f0000000300)=0x93) read(r2, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, 0x0) pwrite64(r1, &(0x7f0000000180)="5478b4c6c76215e1cc0b86529db525a6e431", 0x12, 0x8) close(r1) write$sndseq(0xffffffffffffffff, &(0x7f0000000340)=[{0x2, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x80, 0x42, 0x7, 0x3, @tick=0xffffffff, {0xd8, 0x5}, {0xdb, 0x1}, @time=@tick=0x2f}, {0x8, 0x39, 0x1, 0x3f, @time={0xfff, 0x5}, {0x4, 0x4}, {0x4, 0x7}, @queue={0x80, {0x0, 0x68}}}, {0x8, 0x7, 0xf6, 0x1f, @time={0x101, 0x8}, {0x3f, 0xe0}, {0xe4, 0x2}, @connect={{0x7f, 0xe0}, {0x8, 0xff}}}], 0x70) r3 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r1, r3, 0x0, 0x80001d00c0d0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r3, 0x80083314, &(0x7f0000000280)) creat(&(0x7f0000000040)='./bus\x00', 0x0) 19:59:12 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x0, 0x7, 0x5}) setsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f0000000080)=0x401, 0x4) 19:59:12 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x20000, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 19:59:12 executing program 5: socket(0x10, 0x0, 0x0) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000380)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:59:12 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, 0x0, 0x0, 0x30000c) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/118, 0x76}], 0x1, &(0x7f0000000180)=""/103, 0x67}, 0x40010100) [ 774.051721][T24945] IPVS: ftp: loaded support on port[0] = 21 19:59:12 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/118, 0x76}], 0x1, &(0x7f0000000180)=""/103, 0x67}, 0x40010100) 19:59:12 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x900, 0x0) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, &(0x7f0000000080)={0x0, 0x8}) 19:59:12 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) linkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000100)='./bus\x00', 0x400) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp1\x00', 0x200000, 0x0) fcntl$setsig(r0, 0xa, 0x15) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x40002) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f0000000300)=0x93) read(r2, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, 0x0) pwrite64(r1, &(0x7f0000000180)="5478b4c6c76215e1cc0b86529db525a6e431", 0x12, 0x8) close(r1) write$sndseq(0xffffffffffffffff, &(0x7f0000000340)=[{0x2, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x80, 0x42, 0x7, 0x3, @tick=0xffffffff, {0xd8, 0x5}, {0xdb, 0x1}, @time=@tick=0x2f}, {0x8, 0x39, 0x1, 0x3f, @time={0xfff, 0x5}, {0x4, 0x4}, {0x4, 0x7}, @queue={0x80, {0x0, 0x68}}}, {0x8, 0x7, 0xf6, 0x1f, @time={0x101, 0x8}, {0x3f, 0xe0}, {0xe4, 0x2}, @connect={{0x7f, 0xe0}, {0x8, 0xff}}}], 0x70) r3 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r1, r3, 0x0, 0x80001d00c0d0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r3, 0x80083314, &(0x7f0000000280)) creat(&(0x7f0000000040)='./bus\x00', 0x0) 19:59:13 executing program 1: r0 = socket(0x10, 0x0, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0xfffffffffffffff8, 0x80c00) getpid() r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000040)={0x0, 0x7, 0x5}) ioctl$FBIOGETCMAP(r1, 0x4604, &(0x7f0000000180)={0x8, 0x2, &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 19:59:13 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r4, 0x80585414, &(0x7f00000000c0)) creat(&(0x7f0000000040)='./bus\x00', 0x0) 19:59:13 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$LOOP_CLR_FD(r2, 0x4c01) r3 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000140)) r4 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r4, 0x40189429, &(0x7f0000000040)={0x0, 0x7, 0x5}) r5 = socket(0x29, 0x0, 0x4fd) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@private2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f00000002c0)=0xe8) write$FUSE_ENTRY(r3, &(0x7f0000000300)={0x90, 0xfffffffffffffffe, 0x0, {0x1, 0x3, 0x6a6, 0x1000, 0x4, 0x2, {0x5, 0x9, 0x2, 0x0, 0x4, 0x60eb, 0x3, 0x401, 0x1, 0x6000, 0x1000, r7, 0xee00, 0x1, 0x7}}}, 0x90) write(r5, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205648, &(0x7f0000000100)={0xa10000, 0x6, 0x3ff, r5, 0x0, &(0x7f00000000c0)={0x990a64, 0x7, [], @p_u16=&(0x7f0000000080)=0x8001}}) [ 775.352782][T24945] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 19:59:14 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000040)={0x1, 0x400000000000000}) 19:59:14 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) linkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000100)='./bus\x00', 0x400) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp1\x00', 0x200000, 0x0) fcntl$setsig(r0, 0xa, 0x15) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x40002) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f0000000300)=0x93) read(r2, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, 0x0) pwrite64(r1, &(0x7f0000000180)="5478b4c6c76215e1cc0b86529db525a6e431", 0x12, 0x8) close(r1) write$sndseq(0xffffffffffffffff, &(0x7f0000000340)=[{0x2, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x80, 0x42, 0x7, 0x3, @tick=0xffffffff, {0xd8, 0x5}, {0xdb, 0x1}, @time=@tick=0x2f}, {0x8, 0x39, 0x1, 0x3f, @time={0xfff, 0x5}, {0x4, 0x4}, {0x4, 0x7}, @queue={0x80, {0x0, 0x68}}}, {0x8, 0x7, 0xf6, 0x1f, @time={0x101, 0x8}, {0x3f, 0xe0}, {0xe4, 0x2}, @connect={{0x7f, 0xe0}, {0x8, 0xff}}}], 0x70) r3 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r1, r3, 0x0, 0x80001d00c0d0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r3, 0x80083314, &(0x7f0000000280)) 19:59:14 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/118, 0x76}], 0x1, &(0x7f0000000180)=""/103, 0x67}, 0x40010100) 19:59:14 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000380)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:59:14 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0xc02) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180)='devlink\x00') sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x120, r1, 0x4, 0x70bd25, 0x25dfdbfe, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x7}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7f}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xdf}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x28}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x7fff}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x10001}}]}, 0x120}, 0x1, 0x0, 0x0, 0x2000c001}, 0x6804) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x2000000, &(0x7f0000000000)='\b'}) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000), &(0x7f0000000080)=0x4) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, &(0x7f0000000040)={0x0, 0x7, 0x5}) [ 775.998098][T25028] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 776.025053][T25020] IPVS: ftp: loaded support on port[0] = 21 19:59:14 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) linkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000100)='./bus\x00', 0x400) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp1\x00', 0x200000, 0x0) fcntl$setsig(r0, 0xa, 0x15) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x40002) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f0000000300)=0x93) read(r2, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, 0x0) pwrite64(r1, &(0x7f0000000180)="5478b4c6c76215e1cc0b86529db525a6e431", 0x12, 0x8) close(r1) write$sndseq(0xffffffffffffffff, &(0x7f0000000340)=[{0x2, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x80, 0x42, 0x7, 0x3, @tick=0xffffffff, {0xd8, 0x5}, {0xdb, 0x1}, @time=@tick=0x2f}, {0x8, 0x39, 0x1, 0x3f, @time={0xfff, 0x5}, {0x4, 0x4}, {0x4, 0x7}, @queue={0x80, {0x0, 0x68}}}, {0x8, 0x7, 0xf6, 0x1f, @time={0x101, 0x8}, {0x3f, 0xe0}, {0xe4, 0x2}, @connect={{0x7f, 0xe0}, {0x8, 0xff}}}], 0x70) r3 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r1, r3, 0x0, 0x80001d00c0d0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r3, 0x80083314, &(0x7f0000000280)) 19:59:14 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) socket$netlink(0x10, 0x3, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0x4, 0x4e, 0xc07f}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x4020565b, &(0x7f00000000c0)={0x0, 0x3, 0x2}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000040)={0x0, 0x7, 0x5}) 19:59:14 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) write$sndseq(0xffffffffffffffff, &(0x7f00000002c0)=[{0x3, 0x2, 0xf8, 0x5, @tick=0x1f, {0x7, 0x5}, {0x6, 0x7f}, @control={0x7, 0xfcb40000, 0x80000000}}, {0x0, 0x7, 0x9, 0x37, @tick=0x7000000, {0x5, 0x4}, {0x52, 0x1}, @queue={0x6d, {0x3, 0x2}}}, {0x1, 0x0, 0x7, 0x4f, @tick=0x21e, {0xa1, 0x6}, {0x9, 0x86}, @time=@time={0x800, 0x2}}, {0x1, 0x7, 0x6, 0x3, @tick=0x7f, {0x9, 0x8}, {0xf8, 0x6}, @queue={0x3, {0x81, 0x2}}}, {0x4, 0x8, 0x54, 0x0, @time={0xc2, 0x3}, {0x9, 0x1}, {0x0, 0x5}, @queue={0x5, {0x8, 0x8}}}, {0x6, 0x6, 0x7f, 0x92, @tick=0x9, {0x1}, {0x1, 0x3}, @raw32={[0x7, 0x1, 0x3]}}, {0x4, 0x3, 0x3, 0x2, @tick=0x2, {0xf8, 0x2}, {0x1, 0x3}, @time=@time={0x8, 0x80000001}}, {0xa8, 0x15, 0x3, 0x0, @time={0x80000000, 0x3f}, {0x40, 0x80}, {0x6, 0x6}, @connect={{0xdf, 0x5}, {0x3, 0x5}}}, {0x7, 0x6, 0x6, 0x4, @tick=0x6, {0x7, 0x2}, {0x8, 0x3f}, @time=@time={0x2, 0x400}}], 0xfc) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r2 = open(&(0x7f0000000080)='./bus\x00', 0x181080, 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) r3 = socket(0x10, 0x0, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r2, 0xca289435, &(0x7f0000000940)={0x2, 0x76f, @start={0x0, 0x0, "017b52465bfe92b57eae8954903d384abe1afe7d7a74d68feaebd66473e94bdafc59ad130a3504d7bae1d12a4c94f1337a8502e9d230fed98fb7a974913322355c77c202e86ded3c009a9d69a9ffe0d0950c9afc46f454062a035e83ceb9b1cb00ccebc0820514c1f10d018fe90ddfaeebad2e72a6b0a507e44262bfb999588ede50f0bc65b59a545739b4aede834cc8619eed21b35344737f60f1b2eefcdaaaa6a16f5feca56915867bd30f0c49a60c7e5ec5599a3afb8924df505578a2981cd5d12a31fd01b683b3ae1d169820ee6c4b558e35d6f4ed69c19b44b4cdd4974cbce46fd909e9646b5426acf5b71ecce2a9bc2a4dad51ba383994b956e87f9f390e6c2a3e2c6b5defc782c3fba2053578a1641f04ad1233765c04f39d886da79d251707a2ffaef02414039c92161c34699c411891ad21a49bf543a8423e5a10b4fd683216a2ddbbcfabd9532155744ec178674863af567c5580c8b2a4f9295183ff0459f995d5dd00e353dc1ee958c5829ecd05ec8cf75d6688e5bf3c405f9fcc04cba5bcd69495a4992f4e5b3c5149082309fa2ee2c092154cf2b9bdd41dea9bb2c8d5a4fa43656cc4a568d7f6cf0ad94b28dffb0ffcc7ffbe8ce949c9a3829bc4fbff30ac9bc6d9b41ec658c8a5162547a8d032f100aa7b8daf01c26a90a3e86e729cfb0a1804ebb11012182e16168424462401464a4861aaf21b752a1fc7f4222095c721660472411500748534d02a52c76cfa785d787285348917f32371da832665dc4b67486e078abe32be56d511b871db1b30fe87657cc27e278e0d0300781e9d5ed4254efeb60603cb66675384a6180f52f4a6bed6df7d166342689a503ccaaea462410cfa04091c42e231730f9dfe82d36d6b64c7ecbab84f083432c2db4ce00f2190ce1848590f0bd03292195207b478ecd46d245c43a4e08f5e86a680e50be39cd0fc93afea5b63bdb4ed80a74cc51c994f49907022293691a89b0ba636e9620123bdb90dc01cd356a8526e49f36da5e152a3ab1c16de7ff22034f576386535e78b5402b5415de045b75805875c93504e4e8b844ba3c3001409c0bd2694a610a6af60cedc7e0128bfd02b4652e77930021cf02951926a79171e50a5fc7df86afb2fe12c21a34a2237e28fbc2f125c3bd039d10a0a4c3f8c0656a391f6284be505956adc8c28b836465af0acbda36b4baf8e5d8793705dec4a05a162f1d1573bbd51958558a279b86977e03cb55cce5bb695b768fef7a7a5b08acf9827a5a081825e9078ca884ccf6b3c9dcf03f3dd8d30c62cc45bf09c4e66e1e68f82841d5755a7a418feaf65f955dd20ff0ec948ba3a18257c5b618f548c0e37ed8500455af176502de34c41128f572a39d8ab2376595e89459eccfc5c32f5755739efaf433976f63cdb6b721bd13c2957fe716747f57aa0a1f46fff32fd30520bcd", "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"}, [0x32c3, 0x10000, 0x100, 0x100000000, 0x6, 0x2, 0x7, 0xffff, 0x10000, 0xfffffffffffffff8, 0x4, 0x7, 0x3, 0x7fff, 0xba6, 0x1c0, 0x3219b070, 0x0, 0x3, 0x2, 0x2, 0x7fff, 0x40, 0x9, 0xffffffffffff26fc, 0x7, 0x8, 0x8, 0x7, 0x3, 0x3ff, 0x6, 0xc74, 0x9, 0x3, 0x55e, 0x0, 0x0, 0x8, 0x5, 0x6, 0x238, 0x200, 0x7, 0x80000001, 0x0, 0x2ca, 0x80000001, 0x1, 0x1ff, 0x4, 0x4, 0x1, 0x6, 0xcb, 0x9, 0x1, 0xffffffffffffffc1, 0x805, 0x9, 0x5, 0x0, 0x5, 0x1]}) ioctl$BTRFS_IOC_BALANCE_V2(r3, 0xc4009420, &(0x7f0000001380)={0xc, 0x4, {0x1, @struct={0x9, 0x1000}, 0x0, 0x1f, 0xfffffffffffffff7, 0x9f8, 0x1, 0x7fffffff, 0x4, @struct={0x3, 0x5}, 0x5, 0xbc, [0xbff, 0x1f, 0xfff, 0x8, 0x0, 0x9]}, {0x50, @struct={0x16d, 0x2}, 0x0, 0x329, 0x1000, 0x6f, 0xb360, 0x7, 0x20, @struct={0x3d90, 0xfffffff8}, 0x1f, 0x1f, [0x5, 0x2, 0x3, 0x200, 0x5, 0x3]}, {0x1000, @usage=0x1, r4, 0x1ff, 0x7, 0x2, 0x1f, 0x6, 0x70, @struct={0x9, 0x3ff}, 0xfff, 0x0, [0x0, 0x9, 0x3, 0xff, 0x7, 0x3]}, {0x80000000, 0x1, 0x2}}) write(r3, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) creat(&(0x7f0000000040)='./bus\x00', 0x0) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) setsockopt$inet6_dccp_buf(r5, 0x21, 0xe, &(0x7f00000001c0)="b0031e9f57a9e4c6a58ed60bb5c442c9b0e69573203d1d0a3913a9e6a47c71a42c3f2c30fee05ae9ae8b", 0x2a) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f00000003c0)=[@in6={0xa, 0x4e24, 0x10001, @ipv4={[], [], @multicast2}, 0x3}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}, @in6={0xa, 0x4e22, 0x8, @private1, 0x2}, @in6={0xa, 0x4e21, 0x5, @ipv4={[], [], @broadcast}, 0x6}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e24, 0x4d, @mcast2, 0x101}, @in6={0xa, 0x4e21, 0x2, @loopback, 0x480}, @in={0x2, 0x4e23, @local}, @in={0x2, 0x4e24, @multicast1}], 0xdc) 19:59:14 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ocfs2_control\x00', 0x81, 0x0) write$P9_RSTAT(r0, &(0x7f00000000c0)={0x5a, 0x7d, 0xfffe, {0x0, 0x53, 0x8000, 0x2000040, {0x40, 0x0, 0x2}, 0x0, 0x2, 0x2, 0x3, 0x0, '', 0x10, '\xbb(+@-@*$\'\'^#@-$#', 0x9, '/dev/fb1\x00', 0x7, '\\&:-.-,'}}, 0x5a) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000140), &(0x7f0000000180)=0x4) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20\x00', 0x20200, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0xae44, 0x80) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000040)={0x0, 0x7, 0x5}) 19:59:15 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) linkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000100)='./bus\x00', 0x400) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp1\x00', 0x200000, 0x0) fcntl$setsig(r0, 0xa, 0x15) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x40002) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f0000000300)=0x93) read(r2, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, 0x0) pwrite64(r1, &(0x7f0000000180)="5478b4c6c76215e1cc0b86529db525a6e431", 0x12, 0x8) close(r1) write$sndseq(0xffffffffffffffff, &(0x7f0000000340)=[{0x2, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x80, 0x42, 0x7, 0x3, @tick=0xffffffff, {0xd8, 0x5}, {0xdb, 0x1}, @time=@tick=0x2f}, {0x8, 0x39, 0x1, 0x3f, @time={0xfff, 0x5}, {0x4, 0x4}, {0x4, 0x7}, @queue={0x80, {0x0, 0x68}}}, {0x8, 0x7, 0xf6, 0x1f, @time={0x101, 0x8}, {0x3f, 0xe0}, {0xe4, 0x2}, @connect={{0x7f, 0xe0}, {0x8, 0xff}}}], 0x70) r3 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r1, r3, 0x0, 0x80001d00c0d0) 19:59:15 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) write$UHID_INPUT2(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0xd6) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x6a44, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x100) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time={0x3, 0x7}, {}, {0x81}, @connect={{0x0, 0x8}, {0x0, 0x1}}}], 0x38) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x100) ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f00000000c0)) sendfile(r0, r2, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/81, 0x51}], 0x1) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000100)={0x7, 0x7b, 0x1}, 0x7) 19:59:15 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/118, 0x76}], 0x1, &(0x7f0000000180)=""/103, 0x67}, 0x40010100) 19:59:15 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000040)={0x1, 0x500000000000000}) 19:59:15 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x0, 0x7, 0x5}) socket$inet6_udp(0xa, 0x2, 0x0) 19:59:15 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x48, 0x1, 0x2, 0x201, 0x0, 0x0, {0xc, 0x0, 0x3}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x6}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_NAT={0x24, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_NAT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x40) creat(&(0x7f0000000040)='./bus\x00', 0x0) 19:59:15 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000380)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:59:15 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) linkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000100)='./bus\x00', 0x400) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp1\x00', 0x200000, 0x0) fcntl$setsig(r0, 0xa, 0x15) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x40002) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f0000000300)=0x93) read(r2, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, 0x0) pwrite64(r1, &(0x7f0000000180)="5478b4c6c76215e1cc0b86529db525a6e431", 0x12, 0x8) close(r1) write$sndseq(0xffffffffffffffff, &(0x7f0000000340)=[{0x2, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x80, 0x42, 0x7, 0x3, @tick=0xffffffff, {0xd8, 0x5}, {0xdb, 0x1}, @time=@tick=0x2f}, {0x8, 0x39, 0x1, 0x3f, @time={0xfff, 0x5}, {0x4, 0x4}, {0x4, 0x7}, @queue={0x80, {0x0, 0x68}}}, {0x8, 0x7, 0xf6, 0x1f, @time={0x101, 0x8}, {0x3f, 0xe0}, {0xe4, 0x2}, @connect={{0x7f, 0xe0}, {0x8, 0xff}}}], 0x70) open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) [ 777.350013][T25096] IPVS: ftp: loaded support on port[0] = 21 19:59:16 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) getpid() r2 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) write(0xffffffffffffffff, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000080)={0x0, {0x2, 0x4e22, @private=0xa010102}, {0x2, 0x4e21, @local}, {0x2, 0x4e24, @local}, 0x102, 0x0, 0x0, 0x0, 0x20, 0x0, 0x9, 0x6, 0x8db}) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) ioctl$USBDEVFS_CLAIM_PORT(r1, 0x80045518, &(0x7f0000000100)=0x4) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, &(0x7f0000000040)={0x0, 0x7, 0x5}) 19:59:16 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f00000002c0)={0x1f, 0x11, 0x3, 0x10, 0x5, 0xd332, 0x2, 0x11d, 0x1}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r3, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r4 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r2, r4, 0x0, 0x80001d00c0d0) r5 = dup(r3) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r5, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x68, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'virt_wifi0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x44) creat(&(0x7f0000000040)='./bus\x00', 0x0) 19:59:16 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) linkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000100)='./bus\x00', 0x400) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp1\x00', 0x200000, 0x0) fcntl$setsig(r0, 0xa, 0x15) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x40002) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f0000000300)=0x93) read(r2, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, 0x0) pwrite64(r1, &(0x7f0000000180)="5478b4c6c76215e1cc0b86529db525a6e431", 0x12, 0x8) close(r1) write$sndseq(0xffffffffffffffff, &(0x7f0000000340)=[{0x2, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x80, 0x42, 0x7, 0x3, @tick=0xffffffff, {0xd8, 0x5}, {0xdb, 0x1}, @time=@tick=0x2f}, {0x8, 0x39, 0x1, 0x3f, @time={0xfff, 0x5}, {0x4, 0x4}, {0x4, 0x7}, @queue={0x80, {0x0, 0x68}}}, {0x8, 0x7, 0xf6, 0x1f, @time={0x101, 0x8}, {0x3f, 0xe0}, {0xe4, 0x2}, @connect={{0x7f, 0xe0}, {0x8, 0xff}}}], 0x70) 19:59:16 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r1, 0x0, 0x30000c) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x40010100) [ 777.792238][ T35] kauditd_printk_skb: 31 callbacks suppressed [ 777.792257][ T35] audit: type=1800 audit(1608580756.148:261): pid=25133 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15695 res=0 errno=0 [ 777.949196][ T35] audit: type=1800 audit(1608580756.188:262): pid=25133 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15695 res=0 errno=0 19:59:16 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r1, 0x0, 0x30000c) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) 19:59:16 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x6, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x12050, 0x235e, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() openat$fb1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000000)={0xfffffffffffffffc, 0x7, 0x5}) 19:59:16 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000380)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) [ 778.320354][T25153] IPVS: ftp: loaded support on port[0] = 21 [ 778.554247][T25096] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 778.599318][ T35] audit: type=1800 audit(1608580756.958:263): pid=25177 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15695 res=0 errno=0 [ 778.680000][ T35] audit: type=1800 audit(1608580756.988:264): pid=25177 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15695 res=0 errno=0 [ 778.991552][T25153] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 19:59:17 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000040)={0x1, 0x600000000000000}) 19:59:17 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) linkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000100)='./bus\x00', 0x400) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp1\x00', 0x200000, 0x0) fcntl$setsig(r0, 0xa, 0x15) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x40002) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f0000000300)=0x93) read(r2, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, 0x0) pwrite64(r1, &(0x7f0000000180)="5478b4c6c76215e1cc0b86529db525a6e431", 0x12, 0x8) close(r1) 19:59:17 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x2710, @local}, 0x10, 0x80000) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x0, [], [{0xfffffff8, 0x1, 0x81, 0x9, 0x5, 0x2}, {0xfffffffd, 0x3, 0x5, 0x1, 0xe6, 0x4}], [[]]}) getpid() r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x600, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(r2, 0x8040ae69, &(0x7f00000000c0)={0x1, 0x0, 0x9, 0x1, 0xb687}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000040)={0x0, 0x7, 0x5}) 19:59:17 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1c) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 19:59:17 executing program 5: unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000380)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:59:17 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f00000002c0)={0x1f, 0x11, 0x3, 0x10, 0x5, 0xd332, 0x2, 0x11d, 0x1}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r3, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r4 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r2, r4, 0x0, 0x80001d00c0d0) r5 = dup(r3) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r5, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x68, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'virt_wifi0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x44) creat(&(0x7f0000000040)='./bus\x00', 0x0) [ 779.499920][ T35] audit: type=1800 audit(1608580757.858:265): pid=25194 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15695 res=0 errno=0 [ 779.648999][ T35] audit: type=1800 audit(1608580757.898:266): pid=25194 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15695 res=0 errno=0 19:59:18 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x6}, 0x0, 0xfffffffffffffffc}, 0x0, 0xe, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x0, 0x7, 0x5}) 19:59:18 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) linkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000100)='./bus\x00', 0x400) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp1\x00', 0x200000, 0x0) fcntl$setsig(r0, 0xa, 0x15) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x40002) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f0000000300)=0x93) read(r2, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, 0x0) pwrite64(r1, &(0x7f0000000180)="5478b4c6c76215e1cc0b86529db525a6e431", 0x12, 0x8) [ 779.780930][ T35] audit: type=1800 audit(1608580757.928:267): pid=25195 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15711 res=0 errno=0 19:59:18 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) r3 = dup3(r2, r1, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x17) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000580)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}}, &(0x7f0000000080)=0xb0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000280)={r4, 0xb5, "f487531bc57d6bf86f0bf45f9959c484bbdc028501e01567cd6bf28bd7d472ce183988f147f698cf4c450cdd1ae8d37bd3742e8dfb64b3e4bdef90a538009ca8b4b8ab5fd500c885ef54eda2e6b4fd732f59d087f71ece53e6d44d3b09d454f67bb3966ef9b3c80553f2ca13f0bc197a8112def40cb87f72f9fc89f0ca8e0b71e89bd9a843e418510941b7f9e3ad9898514f99d4bd671a1bc662403d40f0993d56d9ec0023577813537b7f9f4ea94b98857879c923"}, &(0x7f00000000c0)=0xbd) close(r0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r5, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r6 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r0, r6, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r6, 0x3) 19:59:18 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r4, 0x80585414, &(0x7f00000000c0)) creat(&(0x7f0000000040)='./bus\x00', 0x0) [ 779.954518][ T35] audit: type=1800 audit(1608580757.958:268): pid=25195 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15711 res=0 errno=0 [ 780.064429][ T35] audit: type=1800 audit(1608580757.998:269): pid=25199 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15695 res=0 errno=0 [ 780.169695][ T35] audit: type=1800 audit(1608580758.038:270): pid=25199 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15695 res=0 errno=0 19:59:18 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) linkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000100)='./bus\x00', 0x400) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp1\x00', 0x200000, 0x0) fcntl$setsig(r0, 0xa, 0x15) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') socket$inet6(0xa, 0x400000000001, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x40002) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f0000000300)=0x93) read(r1, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) 19:59:18 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x4, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000100), 0x4) r2 = socket(0x10, 0x0, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000001300)={0x0, 0x7f, 0x1, [0x9, 0x1, 0xae, 0xc0, 0x1], [0x0, 0x6, 0x5, 0x6361, 0xb11d, 0x5, 0x6, 0x0, 0xff, 0xffffffffffffff01, 0x7, 0x1, 0x5, 0x9, 0xebc, 0x6, 0x2, 0x3, 0x9, 0x8, 0x8, 0x80, 0x3, 0x9, 0x800, 0x1000, 0x4, 0x31782a4c, 0x6, 0x2, 0x7, 0xfff, 0x2, 0x2, 0x10000, 0x204, 0x7f, 0x1, 0x0, 0x200, 0x4, 0xe4e, 0x10000, 0x5a, 0x4, 0x7fff, 0x7fff, 0xc3, 0x0, 0x6, 0x3, 0x9, 0x1f, 0x0, 0x2, 0x3, 0x5, 0x4, 0x6, 0x8, 0xd90000, 0x8, 0x6, 0x9, 0x401, 0x1d10, 0x1f, 0x0, 0xfffffffffffffffe, 0x80000000, 0x5, 0x5e, 0x20, 0x2, 0xffffffff, 0x4, 0x0, 0x4, 0x4, 0x7fffffff, 0xffff, 0x8, 0x98, 0x1ff, 0x1, 0x3, 0x1, 0xe012, 0xe85, 0x80, 0x1ff, 0x9, 0x1000, 0x401, 0x100000001, 0x6, 0x7f, 0x4, 0x3c063dbb, 0x3f, 0xc7, 0x8, 0x0, 0x0, 0x0, 0x8595, 0x6, 0x9, 0x0, 0x1000, 0x10001, 0x3, 0x4, 0x3, 0x0, 0x9, 0x7, 0xcd3, 0x9, 0x2, 0x6]}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000001740)={r5, "7c8a43813430a945c72c381b0dabcd5c"}) keyctl$chown(0x4, r4, 0x0, 0x0) keyctl$get_persistent(0x16, r3, r4) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000001200)={{{@in6=@private1, @in=@rand_addr=0x64010100, 0x4e20, 0xffff, 0x4e24, 0x0, 0x2, 0x20, 0x80, 0x2, 0x0, r3}, {0x4, 0x3bd, 0x1, 0xeb, 0xddb, 0x9, 0xffff, 0xfb3}, {0x7, 0x1, 0x2, 0xa59}, 0x7ff, 0x6e6bb5, 0x2, 0x0, 0x3, 0x2}, {{@in=@private=0xa010100, 0x4d2, 0x33}, 0xa, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x34ff, 0x2, 0x2, 0x3f, 0x4, 0x949e, 0x1ff}}, 0xe8) ioctl$IMCLEAR_L2(r0, 0x80044946, &(0x7f00000000c0)=0x1) getpid() r6 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r6, 0x40189429, &(0x7f0000000040)={0x0, 0x7, 0x5}) r7 = socket(0x10, 0x0, 0x0) write(r7, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000001140)={r0, r7, 0x1, 0x1000, &(0x7f0000000140)="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", 0xf8, 0x84, 0x4, 0x0, 0xff, 0x3, 0x3, 'syz1\x00'}) [ 780.791421][T25190] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 19:59:20 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000040)={0x1, 0x700000000000000}) 19:59:20 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r4, 0x80585414, &(0x7f00000000c0)) creat(&(0x7f0000000040)='./bus\x00', 0x0) 19:59:20 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = creat(&(0x7f0000000100)='./file0\x00', 0x8a) getpeername$inet(r0, &(0x7f0000000140)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000040)={0x0, 0x7, 0x5}) getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000080)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f00000000c0)=0x2c) 19:59:20 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) linkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000100)='./bus\x00', 0x400) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp1\x00', 0x200000, 0x0) fcntl$setsig(r0, 0xa, 0x15) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') socket$inet6(0xa, 0x400000000001, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x40002) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f0000000300)=0x93) read(r1, 0x0, 0x0) 19:59:20 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f00000000c0)) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000280)={{0x0, 0x1}, 'port0\x00', 0x2, 0x0, 0x1ff, 0x5, 0x3c3, 0x69a742d5, 0x3, 0x0, 0x2, 0x3f}) 19:59:20 executing program 5: unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000380)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:59:20 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) linkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000100)='./bus\x00', 0x400) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp1\x00', 0x200000, 0x0) fcntl$setsig(r0, 0xa, 0x15) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') socket$inet6(0xa, 0x400000000001, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x40002) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) read(r1, 0x0, 0x0) 19:59:20 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time={0xfffffffc}, {}, {}, @connect}], 0x1c) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) r3 = socket(0x10, 0x0, 0x0) write(r3, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) sendto$inet6(r3, &(0x7f0000000280)="bed2623a8169df09634757fcec443734afe4bb7a4712e1ae9c75874b4dee6066b01ff2ecb4c0395304d3376afd918e80dc84e96a5c4c4ccaa34e196a324a814ed23316622231ce7e0c23d57a8d4c430839153b07dac948754b0517c1683afebc15a36cd0583bfe8602dcd00d971d001e3f6270cbc7d2203b777751c210b4a12ea4506543438a341df7", 0x89, 0x8050, &(0x7f00000000c0)={0xa, 0x4e24, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x401}, 0x1c) sendfile(r0, r2, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) open(&(0x7f0000000100)='./bus\x00', 0x2000, 0x12e) 19:59:20 executing program 1: r0 = getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000040)={0x0, 0x7, 0x5}) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/transparent_hugepage/khugepaged/scan_sleep_millisecs\x00', 0x1, 0x0) 19:59:21 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xf, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) r1 = socket(0x10, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f00000001c0)) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080), 0x10, &(0x7f0000000140)={&(0x7f00000000c0)=@canfd={{0x4, 0x0, 0x1, 0x1}, 0x2e, 0x3, 0x0, 0x0, "807e14cecb9ea66d0f286998507615a8704458b16b2f67c1cf2f790086bfde32cf6c2738130b2a6016ccf3515f15ef4b08735dff3e0fb20d5dfb7244eb90b420"}, 0x48}, 0x1, 0x0, 0x0, 0x60000}, 0x10) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x0, 0x7, 0x5}) 19:59:21 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) linkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000100)='./bus\x00', 0x400) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp1\x00', 0x200000, 0x0) fcntl$setsig(r0, 0xa, 0x15) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') socket$inet6(0xa, 0x400000000001, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x40002) read(r1, 0x0, 0x0) 19:59:21 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) r2 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x10001, 0x2a0402) openat(r2, &(0x7f0000000100)='./file0\x00', 0x402, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r3 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r0, r3, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) [ 782.953500][T25242] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 783.018536][ T35] kauditd_printk_skb: 18 callbacks suppressed [ 783.018556][ T35] audit: type=1800 audit(1608580761.378:289): pid=25274 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15695 res=0 errno=0 [ 783.133208][ T35] audit: type=1800 audit(1608580761.438:290): pid=25274 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15695 res=0 errno=0 19:59:22 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000040)={0x1, 0x800000000000000}) 19:59:22 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0xc02) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180)='devlink\x00') sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x120, r1, 0x4, 0x70bd25, 0x25dfdbfe, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x7}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7f}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xdf}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x28}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x7fff}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x10001}}]}, 0x120}, 0x1, 0x0, 0x0, 0x2000c001}, 0x6804) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x2000000, &(0x7f0000000000)='\b'}) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000), &(0x7f0000000080)=0x4) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, &(0x7f0000000040)={0x0, 0x7, 0x5}) 19:59:22 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() getpgid(0xffffffffffffffff) r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x0, 0x7, 0x5}) 19:59:22 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) linkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000100)='./bus\x00', 0x400) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp1\x00', 0x200000, 0x0) fcntl$setsig(r0, 0xa, 0x15) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') socket$inet6(0xa, 0x400000000001, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x40002) read(r1, 0x0, 0x0) 19:59:22 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@tick=0x6}], 0x1c) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r1, r2, 0x0, 0x80001d00c0d0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mmap$qrtrtun(&(0x7f0000fed000/0x11000)=nil, 0x11000, 0x18, 0x1010, r4, 0x3) creat(&(0x7f00000000c0)='./bus\x00', 0x0) 19:59:22 executing program 5: unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000380)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) [ 783.791127][ T35] audit: type=1800 audit(1608580762.148:291): pid=25287 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15695 res=0 errno=0 19:59:22 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) linkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000100)='./bus\x00', 0x400) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp1\x00', 0x200000, 0x0) fcntl$setsig(r0, 0xa, 0x15) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') socket$inet6(0xa, 0x400000000001, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x40002) read(r1, 0x0, 0x0) [ 783.939481][ T35] audit: type=1800 audit(1608580762.198:292): pid=25287 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15695 res=0 errno=0 19:59:22 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x8, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semget$private(0x0, 0x3, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x0, 0x7, 0x5}) 19:59:22 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x20000, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 19:59:22 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect={{}, {0x0, 0x2}}}], 0x1c) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) [ 784.075898][ T35] audit: type=1800 audit(1608580762.278:293): pid=25290 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15695 res=0 errno=0 19:59:22 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) linkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000100)='./bus\x00', 0x400) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp1\x00', 0x200000, 0x0) fcntl$setsig(r0, 0xa, 0x15) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') socket$inet6(0xa, 0x400000000001, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) read(0xffffffffffffffff, 0x0, 0x0) [ 784.192235][ T35] audit: type=1800 audit(1608580762.288:294): pid=25290 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15695 res=0 errno=0 19:59:22 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x40100, 0x0) sendmsg$xdp(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, 0x4, 0x0, 0x3}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000100)="c6473a76085f0760a76356ba828aa3600402b1496719c51d9fe0ec2cbbd8e6f441f92e2d7355b4bbf3fa6f3600248733db8f5db5b7a63899a8745ccff95f1b2bb8eed58cdc3384c5680239e829bbb808d2c9454bf26743555e0058409ee28d7c4fd0af0022522a05159e95f040e98b19c513b7eef6672673eb87373996efdde802fa079ff8daf9c1947dc3d1f8a429b6dadc016bd94b04f4c3c65722b34fdf8e5cccdc78445df5444e3128c06165266191d48c09e866a0dd9341e345411df641267cda8e89e13785ec1dac4d9a5f0b7ba1a39c1142cc4d086beb326fbd9cad871c37608ed67a2e9ac58b824c2a08b2ec34bd2a2a", 0xf4}, {&(0x7f0000000200)="d61d211831184bdbf1d1575196c02e32392626dd2722f21f014cffa0230aa6cd41b511323c3a20932d669140b47a84b34e2c8fc538ffe8182499abe245f4d56e07edfab16ab93a687ae1004de51905d792b1d7", 0x53}], 0x2, 0x0, 0x0, 0xc004}, 0x0) getpid() r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000040)={0x0, 0x7, 0x5}) [ 784.338542][ T35] audit: type=1800 audit(1608580762.598:295): pid=25306 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15711 res=0 errno=0 [ 784.474235][ T35] audit: type=1800 audit(1608580762.628:296): pid=25306 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15711 res=0 errno=0 [ 784.623628][ T35] audit: type=1800 audit(1608580762.648:297): pid=25308 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15695 res=0 errno=0 [ 784.697711][ T35] audit: type=1800 audit(1608580762.658:298): pid=25308 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15695 res=0 errno=0 [ 784.735330][T25319] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 19:59:23 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000040)={0x1, 0xff00000000000000}) 19:59:23 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000180)={0x6, 0x9}) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r2, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) socket$inet_dccp(0x2, 0x6, 0x0) r3 = socket(0x10, 0x0, 0x0) write(r3, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000280)={{{@in=@empty, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000100)=0xe8) lchown(&(0x7f00000000c0)='./bus/file0\x00', r4, 0xee01) r5 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) r6 = pidfd_getfd(r2, r1, 0x0) sendfile(r6, r5, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 19:59:23 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) linkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000100)='./bus\x00', 0x400) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp1\x00', 0x200000, 0x0) fcntl$setsig(r0, 0xa, 0x15) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') socket$inet6(0xa, 0x400000000001, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) read(0xffffffffffffffff, 0x0, 0x0) 19:59:23 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3d8b, 0x8d}, 0x0, 0x3ebf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)={{0x107, 0x2, 0x20, 0x61, 0x3c8, 0x1, 0xe8, 0x889}, "556ae8f07ad24bdce99c7ba4d07c2c990284ab985ae98626f54f2807b114ca1825e458b72091246ba00f8800a2c1f1bc18afa1a2e81f2a8a7db803d2ee6b409b856654cd6b90214d1564df0b6a2883da8eea25dbc6dd68e7c20fd5090b5e044002b9f3d23a7f571616b77bc2c48addb14ca7e879e1a826f88523abb57531f87c59fb44e5d5a1581fc15819db7dfec67dc48ddd4e18953ecff57c285bf2e66947", [[], [], [], [], []]}, 0x5c0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000040)={0x0, 0x7, 0x5}) 19:59:23 executing program 4 (fault-call:8 fault-nth:0): r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r1, 0x0, 0x30000c) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) 19:59:23 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000380)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) [ 785.118463][T25329] IPVS: ftp: loaded support on port[0] = 21 [ 785.140393][T25332] FAULT_INJECTION: forcing a failure. [ 785.140393][T25332] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 785.272846][T25332] CPU: 0 PID: 25332 Comm: syz-executor.4 Not tainted 5.10.0-syzkaller #0 [ 785.281352][T25332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 785.291444][T25332] Call Trace: [ 785.294753][T25332] dump_stack+0x107/0x163 [ 785.299140][T25332] should_fail.cold+0x5/0x1f [ 785.303760][T25332] _copy_to_user+0x2c/0x150 [ 785.308341][T25332] simple_read_from_buffer+0xcc/0x160 [ 785.313767][T25332] proc_fail_nth_read+0x187/0x220 19:59:23 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x108, 0x0, &(0x7f0000000340)=[@clear_death, @acquire, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x801, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/18, 0x12, 0x0, 0x24}}, &(0x7f0000000100)={0x0, 0x18, 0x40}}}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000280)={@flat=@handle={0x73682a85, 0x1000, 0x1}, @flat=@weak_handle={0x77682a85, 0x0, 0x2}, @flat=@weak_handle={0x77682a85, 0x0, 0x3}}, &(0x7f0000000300)={0x0, 0x18, 0x30}}}, @increfs_done={0x40106308, 0x1}, @request_death, @request_death={0x400c630e, 0x1}, @acquire_done, @decrefs, @clear_death={0x400c630f, 0x2}], 0x0, 0x0, &(0x7f0000000480)}) chdir(&(0x7f0000000240)='./file0\x00') r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r3, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r4 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r2, r4, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 19:59:23 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) linkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000100)='./bus\x00', 0x400) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp1\x00', 0x200000, 0x0) fcntl$setsig(r0, 0xa, 0x15) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') socket$inet6(0xa, 0x400000000001, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) read(0xffffffffffffffff, 0x0, 0x0) 19:59:23 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000040)={0x1, 0xffffffff00000000}) [ 785.318841][T25332] ? proc_fault_inject_read+0x220/0x220 [ 785.324429][T25332] ? security_file_permission+0x248/0x560 [ 785.330640][T25332] ? proc_fault_inject_read+0x220/0x220 [ 785.336239][T25332] vfs_read+0x1b5/0x570 [ 785.340439][T25332] ksys_read+0x12d/0x250 [ 785.344708][T25332] ? vfs_write+0xa80/0xa80 [ 785.349165][T25332] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 785.355444][T25332] ? __secure_computing+0x241/0x360 [ 785.360695][T25332] do_syscall_64+0x2d/0x70 [ 785.365157][T25332] entry_SYSCALL_64_after_hwframe+0x44/0xa9 19:59:23 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000040)={0x1, 0x0, 0x2}) [ 785.371099][T25332] RIP: 0033:0x417a41 [ 785.375025][T25332] Code: 75 14 b8 00 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 6a fc ff ff 48 89 04 24 b8 00 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 b3 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 785.394674][T25332] RSP: 002b:00007fade5186c70 EFLAGS: 00000293 ORIG_RAX: 0000000000000000 [ 785.403331][T25332] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 0000000000417a41 [ 785.411342][T25332] RDX: 000000000000000f RSI: 00007fade5186cb0 RDI: 0000000000000003 [ 785.419369][T25332] RBP: 00007fade5186ca0 R08: 0000000000000000 R09: 0000000000000000 [ 785.427373][T25332] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 785.435382][T25332] R13: 00000000016afb7f R14: 00007fade51879c0 R15: 000000000119bf8c 19:59:23 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x883}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x0, 0x7, 0x5}) 19:59:24 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) linkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000100)='./bus\x00', 0x400) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp1\x00', 0x200000, 0x0) fcntl$setsig(r0, 0xa, 0x15) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r1 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x40002) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) read(r1, 0x0, 0x0) 19:59:24 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x0, 0x0) tgkill(r0, r1, 0x3f) r2 = syz_open_dev$vcsu(&(0x7f0000000080)='/dev/vcsu#\x00', 0x7fff, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, r3, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010102}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x80}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffff}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x200}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000014}, 0x20000000) r4 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r4, 0x40189429, &(0x7f0000000040)={0x0, 0x7, 0x5}) read$hidraw(0xffffffffffffffff, &(0x7f0000000240)=""/12, 0xc) 19:59:24 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r1, 0x0, 0x30000c) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) 19:59:24 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r1, 0x0, 0x30000c) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x7) 19:59:24 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000380)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:59:24 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) linkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000100)='./bus\x00', 0x400) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp1\x00', 0x200000, 0x0) fcntl$setsig(r0, 0xa, 0x15) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x40002) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) read(r1, 0x0, 0x0) 19:59:24 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r1, 0x0, 0x30000c) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x700) [ 786.311325][T25388] IPVS: ftp: loaded support on port[0] = 21 19:59:24 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r1, 0x0, 0x30000c) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x1000000) 19:59:24 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket(0x10, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r2 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r2, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r3 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r0, r3, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 19:59:25 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r1, 0x0, 0x30000c) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x7000000) 19:59:25 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000040)={0x1, 0x0, 0x3}) 19:59:25 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) linkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000100)='./bus\x00', 0x400) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp1\x00', 0x200000, 0x0) fcntl$setsig(r0, 0xa, 0x15) r1 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x40002) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) read(r1, 0x0, 0x0) 19:59:25 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r1, 0x0, 0x30000c) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x100000000000000) 19:59:25 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000080)='trusted.overlay.opaque\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) getpid() r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000040)={0x0, 0x7, 0x5}) 19:59:25 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000500)=""/4096) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) pkey_free(0xffffffffffffffff) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r2 = open(&(0x7f0000000100)='./bus\x00', 0x164142, 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) r4 = dup3(r3, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x17) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000580)={r5, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x10, 0x0}}}}}, &(0x7f0000000080)=0xb0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={r5, @in6={{0xa, 0x4e20, 0x4, @remote, 0x8}}}, &(0x7f00000000c0)=0x84) 19:59:25 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000380)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:59:25 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r1, 0x0, 0x30000c) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x700000000000000) [ 787.319509][T25454] IPVS: ftp: loaded support on port[0] = 21 19:59:25 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x8001}, {}, {}, @connect}], 0x1c) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) mount(&(0x7f00000000c0)=@nullb='/dev/nullb0\x00', &(0x7f0000000100)='./bus\x00', &(0x7f0000000180)='ncpfs\x00', 0x22085, &(0x7f00000001c0)='\x00') getsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000280)={0xa, [0xfffc, 0x8, 0x4, 0x8, 0x200, 0x7f, 0x5, 0x1e, 0x6, 0x400]}, &(0x7f00000002c0)=0x18) creat(&(0x7f0000000040)='./bus\x00', 0x0) 19:59:25 executing program 4: r0 = gettid() clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x30000c) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) 19:59:25 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000080)) r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x2000, 0x0) r1 = socket(0x10, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x0, 0x7, 0x5}) 19:59:25 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) linkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000100)='./bus\x00', 0x400) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp1\x00', 0x200000, 0x0) fcntl$setsig(r0, 0xa, 0x15) r1 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x40002) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) read(r1, 0x0, 0x0) [ 787.596649][T25483] ptrace attach of "/root/syz-executor.4"[25481] was attempted by "/root/syz-executor.4"[25483] 19:59:26 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r3 = dup(r1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x18}) 19:59:26 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000040)={0x1, 0x0, 0x4}) 19:59:26 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000380)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:59:26 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000380)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:59:26 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) linkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000100)='./bus\x00', 0x400) openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp1\x00', 0x200000, 0x0) r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x40002) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) read(r0, 0x0, 0x0) [ 788.335308][T25508] IPVS: ftp: loaded support on port[0] = 21 [ 788.341782][T25507] IPVS: ftp: loaded support on port[0] = 21 [ 788.353778][T25512] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 19:59:26 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$DRM_IOCTL_AUTH_MAGIC(0xffffffffffffffff, 0x40046411, &(0x7f0000000080)=0x8) r1 = gettid() rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r1, 0x0, 0x30000c) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) [ 788.389693][ T35] kauditd_printk_skb: 21 callbacks suppressed [ 788.389712][ T35] audit: type=1326 audit(1608580766.748:320): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=25473 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460faa code=0x0 [ 788.605163][ T35] audit: type=1326 audit(1608580766.968:321): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=25528 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460faa code=0x0 19:59:27 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) linkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000100)='./bus\x00', 0x400) r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x40002) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) read(r0, 0x0, 0x0) 19:59:27 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000380)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:59:27 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x24a001, 0x0) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f00000001c0)={0x16, @empty, 0x4e23, 0x4, 'rr\x00', 0x2, 0x6, 0x73}, 0x2c) r2 = gettid() rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r2, 0x0, 0x30000c) ioctl$TCSETXW(r1, 0x5435, &(0x7f0000000200)={0xfffb, 0x3, [0xfffd, 0x0, 0x8, 0x8, 0x30], 0xff0a}) wait4(0x0, 0x0, 0x0, 0x0) read$sequencer(0xffffffffffffffff, &(0x7f0000000080)=""/219, 0xdb) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) [ 788.737826][ T35] audit: type=1800 audit(1608580767.068:322): pid=25502 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15695 res=0 errno=0 19:59:27 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x200000, 0x0) sendto$inet6(r1, &(0x7f0000000280)="63c065a7ec0b173aa345760ade8c3efec6008012bdf9cbf4c0117a6d7f1244f5e2c6fb4f0dea51f8a16e9c38e36fb1060eeb1f53defe60440e53ccef68f27013a50feef673582013e8503bd8343cb7b3d9225c754ee195ff72e7689d41bb2ac236603e1f409f713d62143b915889bb0cf480db33d98f5f5388dd6de5634bba33cdce7f6886acf25d115a674cf13620c2126606c6709ab1aedd43ed8d6c758cbc094c334761dfbf3036ecbbbf65c848c87c0df079a04cc90cdc48326674", 0xbd, 0x24008001, &(0x7f0000000180)={0xa, 0x4e20, 0x3, @remote, 0x9}, 0x1c) r2 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r2, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000100)=0xfffffffffffff001) ioctl$EVIOCSABS0(r2, 0x401845c0, &(0x7f00000000c0)={0x74, 0x3, 0x3ff, 0x800, 0x3, 0x6}) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x46) sendfile(r0, r3, 0x0, 0x80001d00c0d0) [ 788.870535][ T35] audit: type=1800 audit(1608580767.128:323): pid=25556 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15695 res=0 errno=0 [ 788.906743][T25570] IPVS: ftp: loaded support on port[0] = 21 [ 788.924109][T25573] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 19:59:27 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) ioctl$CHAR_RAW_BSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000080)) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r1, 0x0, 0x30000c) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) 19:59:27 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r3 = dup(r1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x18}) 19:59:27 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x40002) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) read(r0, 0x0, 0x0) [ 789.126933][ T35] audit: type=1800 audit(1608580767.488:324): pid=25589 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15695 res=0 errno=0 [ 789.220862][ T35] audit: type=1804 audit(1608580767.538:325): pid=25589 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/newroot/530/file0/bus" dev="sda1" ino=15695 res=1 errno=0 [ 789.348897][ T35] audit: type=1800 audit(1608580767.568:326): pid=25603 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15770 res=0 errno=0 [ 789.474528][ T35] audit: type=1326 audit(1608580767.578:327): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=25588 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460faa code=0x0 [ 789.555465][ T35] audit: type=1800 audit(1608580767.608:328): pid=25603 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15770 res=0 errno=0 19:59:28 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000040)={0x1, 0x0, 0x5}) 19:59:28 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000380)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:59:28 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) linkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000100)='./bus\x00', 0x400) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp1\x00', 0x200000, 0x0) fcntl$setsig(r0, 0xa, 0x15) r1 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x40002) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) read(r1, 0x0, 0x0) 19:59:28 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x40002) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) read(r0, 0x0, 0x0) 19:59:28 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x56b, @local, 0x5}, 0x1c) [ 789.655262][ T35] audit: type=1800 audit(1608580767.798:329): pid=25589 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15695 res=0 errno=0 [ 789.752707][T25618] IPVS: ftp: loaded support on port[0] = 21 [ 789.776939][T25623] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 19:59:28 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x40002) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) read(r0, 0x0, 0x0) 19:59:28 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) linkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000100)='./bus\x00', 0x400) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp1\x00', 0x200000, 0x0) fcntl$setsig(r0, 0xa, 0x15) r1 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x40002) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) read(r1, 0x0, 0x0) 19:59:28 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000380)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) [ 790.269004][T25659] IPVS: ftp: loaded support on port[0] = 21 19:59:28 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000040)={0x1, 0x0, 0x6}) [ 791.062079][T25659] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 19:59:30 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f00000012c0)={0x0, r0}) r1 = gettid() rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) recvmsg$qrtr(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f0000000080), 0xc, &(0x7f0000001180)=[{&(0x7f00000000c0)=""/11, 0xb}, {&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f0000001100)=""/65, 0x41}], 0x3, &(0x7f00000011c0)=[{0x88, 0x0, 0x0, ""/119}], 0x88, 0x40}, 0x38, 0x100) ptrace$setopts(0x4206, r1, 0x0, 0x30000c) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x0, 0x4) wait4(0x0, 0x0, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) 19:59:30 executing program 3: r0 = syz_open_dev$usbfs(0x0, 0x4000000000000071, 0x40002) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) read(r0, 0x0, 0x0) 19:59:30 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) linkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000100)='./bus\x00', 0x400) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp1\x00', 0x200000, 0x0) fcntl$setsig(r0, 0xa, 0x15) r1 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x40002) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) read(r1, 0x0, 0x0) 19:59:30 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000040)={0x1, 0x0, 0x7}) 19:59:30 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000280)=""/160) close(r0) r1 = open(&(0x7f0000000180)='./bus\x00', 0xf942, 0x4d) write$sndseq(r1, &(0x7f00000000c0)=[{0xf9, 0x3, 0x0, 0x0, @time, {}, {}, @connect={{0x4}}}], 0x1c) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$ASHMEM_SET_PROT_MASK(r2, 0x40087705, &(0x7f0000000100)={0x5, 0x4}) 19:59:30 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x0, 0x800000003, 0x0) bind(r1, &(0x7f0000000380)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) [ 792.240079][T25701] IPVS: ftp: loaded support on port[0] = 21 19:59:30 executing program 3: r0 = syz_open_dev$usbfs(0x0, 0x4000000000000071, 0x40002) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) read(r0, 0x0, 0x0) 19:59:30 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r1, 0x0, 0x30000c) wait4(0x0, 0x0, 0x0, 0x0) getsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0xb, &(0x7f00000000c0), &(0x7f0000000100)=0x4) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000140)={0x1e, 0x37, 0x2, {0x2, 0x3f, 0x6, r1}}, 0x1e) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) kcmp(r1, r2, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) 19:59:30 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$P9_RLERROR(r3, &(0x7f00000000c0)={0xb, 0x7, 0x2, {0x2, '#-'}}, 0xb) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00') sendmsg$NL80211_CMD_SET_CHANNEL(r4, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x50, r5, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x20}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3bb}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x96c}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xd}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3a}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040000}, 0x4008004) 19:59:30 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket(0x10, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r2 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r2, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r3 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r0, r3, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 19:59:30 executing program 3: r0 = syz_open_dev$usbfs(0x0, 0x4000000000000071, 0x40002) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) read(r0, 0x0, 0x0) 19:59:31 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x0, 0x40002) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) read(r0, 0x0, 0x0) 19:59:31 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) openat2(r1, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)={0x200000, 0x24, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x140c, 0x100, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) fcntl$getownex(r2, 0x10, &(0x7f00000000c0)) creat(&(0x7f0000000040)='./bus\x00', 0x0) 19:59:31 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x0, 0x40002) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) read(r0, 0x0, 0x0) 19:59:31 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x0, 0x40002) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) read(r0, 0x0, 0x0) [ 793.347339][T25704] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 793.826584][ T35] kauditd_printk_skb: 19 callbacks suppressed [ 793.826604][ T35] audit: type=1800 audit(1608580772.188:349): pid=25755 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15695 res=0 errno=0 [ 793.938957][ T35] audit: type=1800 audit(1608580772.238:350): pid=25764 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15695 res=0 errno=0 19:59:32 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000040)={0x1, 0x0, 0x8}) 19:59:32 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) read(r0, 0x0, 0x0) 19:59:32 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000002180)=[{{0x0, 0x0, 0x0}, 0x8000}, {{0x0, 0x0, &(0x7f0000000680)=[{0x0}, {&(0x7f0000000700)=""/97, 0x61}], 0x2}}, {{0x0, 0x0, &(0x7f0000001bc0)=[{0x0}, {&(0x7f0000001a00)=""/234, 0xea}], 0x2}, 0x8000}], 0x3, 0x0, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x7ff) sendmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xfffffffffffffed3, &(0x7f0000000940)=[{&(0x7f00000006c0)='O', 0x57e}], 0x1}}], 0x4000000000003bd, 0x8800) write$binfmt_misc(r1, &(0x7f0000000240)=ANY=[], 0x8) splice(r0, 0x0, r2, 0x0, 0x4, 0x0) 19:59:32 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x0, 0x800000003, 0x0) bind(r1, &(0x7f0000000380)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) [ 794.130939][T25772] IPVS: ftp: loaded support on port[0] = 21 [ 794.728387][T25775] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 19:59:33 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r1, 0x0, 0x30000c) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={0xffffffffffffffff, 0x9, 0x1, 0x3f, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) 19:59:33 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) chroot(&(0x7f00000000c0)='./file0\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 19:59:33 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) read(r0, 0x0, 0x0) 19:59:33 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) openat2(r1, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)={0x200000, 0x24, 0x1}, 0x18) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x140c, 0x100, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) fcntl$getownex(r2, 0x10, &(0x7f00000000c0)) creat(&(0x7f0000000040)='./bus\x00', 0x0) 19:59:33 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x0, 0x800000003, 0x0) bind(r1, &(0x7f0000000380)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:59:33 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000040)={0x1, 0x0, 0x300}) 19:59:33 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) read(r0, 0x0, 0x0) [ 795.593852][T25817] IPVS: ftp: loaded support on port[0] = 21 [ 795.603501][ T35] audit: type=1800 audit(1608580773.958:351): pid=25819 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15770 res=0 errno=0 19:59:34 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000000)={0x0, 0x989680}, 0x8) ptrace$setopts(0x4206, r1, 0x0, 0x30000c) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) 19:59:34 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) getdents(r1, &(0x7f00000000c0)=""/104, 0x68) sendfile(r0, r2, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) [ 795.686781][ T35] audit: type=1800 audit(1608580774.018:352): pid=25819 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15770 res=0 errno=0 19:59:34 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x40002) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) read(r0, 0x0, 0x0) 19:59:34 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r1, 0x0, 0x30000c) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, &(0x7f0000000080)={0x3, @raw_data="617505c811794dcbf0556a5ba0153e65bca0e29081758b5d0a159e434662880a4913c04980438df0bffce96558854b5f999dbb81f9bcebddcdc56f0b9ab349f93f7ef638a3dc3029705d01f739907a7340839d982e0470cf77dd9e6a36aee91c7751b8137e1503275ba5b19c96eff0b547d8eb829a735aebb3fc73a7b8fb5940fee82edad30cf79010ade663236e96406fc1eaceffbe37a8da75b28e6864ee6f1740cf34a32f98253fae47b086088efd834a610dbb0d6de0c110e8e4cd61464d06bd6b468200ffa3"}) [ 795.987599][ T35] audit: type=1800 audit(1608580774.338:353): pid=25845 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15695 res=0 errno=0 19:59:34 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x840, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x2, 0x4, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local}}]}, 0x60}}, 0x0) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000040)=0x4) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r2, 0x29, 0x41, &(0x7f0000000080)=ANY=[@ANYBLOB="7365637572697479000000000000000000000000000000000000000000000000ef00000002e9587edbef10e1285e63d0ac13a67dbf25e07a49a86b980a0a7109ae71d6f16897b97d8eaf4e6987ea14713261e7cbfe68e5c3095cffed01c053dcbbba452d7833a6979bc0e97cb9b8f1b800b0b14e810600bd6eae38cc96507681dcd072a997df5e89e3eff6552f015c542f8e4232eaff607d315ca79776e58241829aac325bcaa34ddc853b45b7596b6d8de0cd58c3238edddedc767c5f68bc3a0e2e7c1adc3fe26f2b05a8cb13b05f04f3b406a84a3dc44d63cfc91d4862ceaa7056137640dae24c42cd899c25fb804cfdae5d530f174f6c73c07e4f851862c5f9c6ba03adcf449da986271963687bd566f493"], &(0x7f00000001c0)=0x113) 19:59:34 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x40002) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) read(r0, 0x0, 0x0) [ 796.071428][ T35] audit: type=1800 audit(1608580774.378:354): pid=25845 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15695 res=0 errno=0 19:59:34 executing program 4: r0 = gettid() r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$TUNSETGROUP(r1, 0x400454ce, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x2200, 0x2) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f0000000100)=0x3) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r3, 0x0, 0x30000c) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) 19:59:34 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x4) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) open$dir(&(0x7f0000000280)='./bus\x00', 0x80, 0x10) creat(&(0x7f00000000c0)='./bus\x00', 0x50) [ 796.241466][ T35] audit: type=1800 audit(1608580774.488:355): pid=25850 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15695 res=0 errno=0 19:59:34 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r1, 0x0, 0x30000c) wait4(0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f00000001c0)) syslog(0x2, &(0x7f0000000200)=""/17, 0x11) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000240)=0x0) ptrace$cont(0x9, r3, 0x9, 0x8) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3e8, 0x313, 0x70bd2c, 0x25dfdbfb, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x44) [ 796.358001][ T35] audit: type=1800 audit(1608580774.498:356): pid=25850 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15695 res=0 errno=0 [ 796.463174][ T35] audit: type=1800 audit(1608580774.798:357): pid=25881 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15695 res=0 errno=0 [ 796.553531][ T35] audit: type=1800 audit(1608580774.808:358): pid=25881 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15695 res=0 errno=0 [ 796.747784][T25817] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 19:59:35 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000040)={0x1, 0x0, 0x500}) 19:59:35 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x40002) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) read(r0, 0x0, 0x0) 19:59:35 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) getdents(r1, &(0x7f00000000c0)=""/104, 0x68) sendfile(r0, r2, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 19:59:35 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x0, 0x0) bind(r1, &(0x7f0000000380)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:59:35 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c28281408d8b61e721de1000000080601020050437e000000000000"], 0x1c}}, 0x20000880) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000500)={0x0, 0x81, 0x100000000000, 0x1}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000900)={r2, 0x7fffffff, 0x101}) r3 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r3, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r4 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r0, r4, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) [ 797.165365][T25900] IPVS: ftp: loaded support on port[0] = 21 19:59:35 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x40002) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) read(r0, 0x0, 0x0) 19:59:35 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r1, 0x0, 0x30000c) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001440)={&(0x7f00000000c0)={0x1380, 0x0, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0xc4, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4249}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x800}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7e99}]}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x101}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000001}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0xa8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc24}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb68f}]}, @TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_NODE={0x1064, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "0c9599c473618a316516ccc3c91db0c7d3030b25a1c6c6658f51567e89b232d57b9f"}}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth0_virt_wifi\x00'}}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8001}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4b09}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}]}, @TIPC_NLA_NODE={0x120, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xb0, 0x3, "33fbcd3d27d936b15822edd518899c8369b955cf8e6ed8ea996e39153eb3aed35cc1d28961ba16e94716fddbf95e472d6cf3a919147472a45e93245b95d9d5cda00bf70004582ec112d896ddb5e5fd720dcab5ec291f35b002eab756bfee5549a0351eb1a7092bcab9eb7936975ef03e5120ed5ea3a31b550e3038cfab5fba3a92589ddfca312f9a5e5e1b9a513f022c1b77d812ac4b8d159721ad65d59d02213a98eea9726c0fb05ea6dba5"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "47bf46b090a78fb03e2b9ddfe795e3fc258693794cb1af8e986568896cb14dc0cc2585"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xb5}]}]}, 0x1380}}, 0x800) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) 19:59:35 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000280)={0x8, 0x120, 0xfa00, {0x2, {0xffffffff, 0x40, "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", 0x9b, 0x75, 0x3f, 0x7f, 0x40, 0x0, 0x1, 0x1}}}, 0x128) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 19:59:35 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x40002) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) read(r0, 0x0, 0x0) 19:59:36 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r1, 0x0, 0x30000c) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x40012323) 19:59:36 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() listxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/4096, 0x1000) rt_sigtimedwait(&(0x7f0000000040)={[0xfffffffffffffffd]}, 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r1, 0x0, 0x30000c) wait4(0x0, 0x0, 0x0, 0x0) r2 = accept4(0xffffffffffffffff, &(0x7f0000001340)=@l2tp={0x2, 0x0, @empty}, &(0x7f00000013c0)=0x80, 0x0) recvmsg$kcm(r2, &(0x7f0000001700)={&(0x7f0000001400)=@l2tp6={0xa, 0x0, 0x0, @ipv4={[], [], @private}}, 0x80, &(0x7f0000001600)=[{&(0x7f0000001480)=""/48, 0x30}, {&(0x7f00000014c0)=""/124, 0x7c}, {&(0x7f0000001540)=""/77, 0x4d}, {&(0x7f00000015c0)=""/31, 0x1f}], 0x4, &(0x7f0000001640)=""/136, 0x88}, 0x2040) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) 19:59:36 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x40002) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) read(r0, 0x0, 0x0) [ 798.140983][T25900] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 19:59:36 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000040)={0x1, 0x0, 0x600}) 19:59:36 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat2(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)={0x200000, 0x1, 0x8}, 0x18) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000180)={0xd30, 0x2, 0x4, 0x40, 0x3, {0x77359400}, {0x4, 0x8, 0x9c, 0x5, 0xf9, 0x8, "16367c7d"}, 0x8, 0x1, @offset=0x7fffffff, 0x6, 0x0, r1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$RTC_VL_CLR(r4, 0x7014) r5 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x1b3) write$sndseq(r5, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r6 = open(&(0x7f0000000340)='./file0\x00', 0x544142, 0xc0) sendfile(r0, r6, 0x0, 0x80001d00c0d0) r7 = dup(r2) copy_file_range(r7, &(0x7f00000002c0)=0x7, r1, &(0x7f0000000300), 0x1000, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r6, 0x400443c8, &(0x7f0000000280)={r5, 0x3}) 19:59:36 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) getdents(r1, &(0x7f00000000c0)=""/104, 0x68) sendfile(r0, r2, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 19:59:36 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x30000a) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, &(0x7f0000000080)="f1295220c42f182d23b8032d62234135fd3b46e54c7b044c98dda233c9bc5336d2c0c902dab6bf2784") 19:59:36 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x40002) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) read(r0, 0x0, 0x0) 19:59:36 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x0, 0x0) bind(r1, &(0x7f0000000380)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:59:37 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r1, 0x0, 0x30000c) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) [ 798.634318][T25970] IPVS: ftp: loaded support on port[0] = 21 19:59:37 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x40002) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) read(r0, 0x0, 0x0) 19:59:37 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = semget$private(0x0, 0x4, 0x540) semctl$GETVAL(r1, 0x0, 0xc, &(0x7f0000000180)=""/102) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000100)='trusted.overlay.opaque\x00', &(0x7f0000000280)='y\x00', 0x2, 0x1) close(r0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000003140)={0x0, @in6={{0xa, 0x4e20, 0x2, @loopback, 0x81}}}, &(0x7f0000003200)=0x84) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000000c0)) write$sndseq(r2, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400201) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000003240)={{0x2, 0x1, 0x8, 0x3, 0x3}, 0x9, 0x80000001, 'id1\x00', 'timer0\x00', 0x0, 0x4, 0x9, 0x81, 0xffff}) r3 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendmmsg$sock(r3, &(0x7f0000002f00)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000002c0)="2d7fca5c97a8c3d99a772c0a643fb94a6dfe7ed732f491809e84e3ecc7a627fb4484fbe3b09c9a610a5ccbf7c672c442a096e50257be5f7ed4e04eaa12ad2e5c004a104d742733a5bf7a833989dbe7159d703eb5a17d6478513e7b43adfd0027703661066da7091220198b3af05dd566ab9233528694dbfc1073e1d1985ff2e663a7ad417a07e094aa322c2ef7bbb720e4710a3f03fdf7f48947bdb75a9c6fb75f2229ea", 0xa4}, {&(0x7f0000000380)="f2d6728761958b7a9dbfaa13bef88a2dee00b966d689b4a810c9d7716d75a162d13afa84c676d624900e2368c0ae1a11dfb082777d95b88168ef0af79cffc7bb85500c55c2345fe48b3feecb0bca0197ad762664f9a248781d144b", 0x5b}], 0x2, &(0x7f0000000500)}}, {{&(0x7f0000000440)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12-simd\x00'}, 0x80, &(0x7f0000000800)=[{&(0x7f00000005c0)="92c50e41560565f55c4b0980cf6da4f711c1466fcd", 0x15}, {&(0x7f0000000600)="90bad3ce3feba15508549c6d43a9b7df22492eee66eefcc00fcf784522a17179f154ea85f685b625b3c8570624c5362b8f170b22d062521d2185f790cceab12b6d7e89a3d42f6354b80dcfe5e15569b52325d6742dbf5ca720fdbbdd58c0b157e421518ad4f17ffb47ccc65ae298a53dbd009d74b66b7c607044257b85952ca376e465a6192e23ea187561bb8cbc297729ffb842fc5cc6e96966385e4e3a9f1a0207aacd6facd3923ca8fc4d55006e0464ac4da766d3d89500c529ce4c79ef6c75c266f1aa691c94d3394f7a216c355d4c73d9be2a3d02f82a8d41e28633a1011a6994522ad477e74d4d6d0b412fab190c", 0xf1}, {&(0x7f0000000700)="1267ab1e04d2dd019b45cac49886c23514947435fc1938910cb898e3715a176b7702c43ccc355f00adfdf324dea12161e2f76f9a44f2bc3fec4a9cb6fded389a2291e6c0817fbf1e79e807d6c1751962e12fe127fd7030093dfb46b1757eccfdca08d423cf3b4758", 0x68}, {&(0x7f0000000780)="062661da78f19137aee69c4168da59e8228e4628be31dd049f15d207b6b7b7ff51d0f153230892678dd35216bddb787c8f4a2425e0adfac2ce1c45a3587744dc0ee9333ebc3ff4514f30271e92fbbef2ff3c2cf1a59ccb9faa05c40a91d9d09e2daf786a453193c1d94e", 0x6a}], 0x4, &(0x7f0000000840)=[@timestamping={{0x14, 0x1, 0x25, 0x40000}}, @timestamping={{0x14, 0x1, 0x25, 0x18}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x48}}, {{&(0x7f00000008c0)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, [], 0x39}, 0x3}}, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000940)="68cc804a1462de10605e40988ce4633dd8e35d295408f39a586fcb7150b52861ab0d975ee6137f623d22364ddd8ecd8bea84723dd7fd738b7f43159bf2a7798690c01523de", 0x45}, {&(0x7f00000009c0)="cbf5e9d08626f2e944e0fdfdf3ecd76c494d0be96c5ddd786ba98a0178a88d50544f", 0x22}, {&(0x7f0000000a00)="52467e5ee2630a4bd2d97679cb1f43e802b7676dd92b7ceee28f68db1323855baf8913cae3e2a78ca4ea0ed4c7fa0f114e7bdceb2a85ade0f9ff33c0a86c7b9c9b724deb047653ac15d6218eb6c6971bc7e676cc1eec2a7f0e5b2e4ced20b0aef3321e73e22148af98019daa8c4909b6f754ccf0138d827abe264339f730e49f258619b30059103a21855f4817368012360f4776af59637903fd64deef0cf1423e15e86e3718fa3a80d7a1765209aab421b89d8d5305ca5eb25466731799087448dfb6a28d94b2c77a66a937b50a839b4a990eba959e7fb67a790ddfe8557c4611ab4b64925c5beda376eae501", 0xed}, {&(0x7f0000000b00)="bb230b21d6ecb596d65d3283b4c40eaea82a12d76c5687f59d862e71b63237d68896393b9eceada701cfc6af13eeb02aa98336278b521383c4a404813ef5536682acf943d4", 0x45}], 0x4, &(0x7f0000000bc0)=[@mark={{0x14, 0x1, 0x24, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x80000001}}], 0x30}}, {{0x0, 0x0, &(0x7f0000001e80)}}, {{&(0x7f0000001f00)=@ethernet={0x6}, 0x80, &(0x7f0000002440)=[{&(0x7f0000001f80)="81dc5666b54c1f15f92afe8a170ece90c6f45eddd9d777ebdde60aa79c16e440083b06bf92bafdaa14f8b91b5a00c1d41de40174d4b164ab626e898b569b4bee9e6335832623a932c6e97fd0ccd7d7946839e94299a1a8a1193b0ab04362b18aa42738b93dff95e8d6aa9b36fd3b5ea0e9ecb2808af99425255908c79b287123e567fc51b581abcbe7fd4e15c8a83da1c8370d438b1127a5a4ec29f3ced56bfdb204e47e111fafb4f5e8f538fdc1d79bfccd82", 0xb3}, {&(0x7f0000002040)="5d975106d2f84c36acc73b639493dbb017a516991f2c54a29c196fe2d5c9a0a9061ff8968c2b44f74920aa682d2362967d645058c5124de6eddcf2f2a1241ca0a21b4876527b8312291343c25e3c96375608090bf21cc51378cbb968c461cb151b163dbdd0ef4f75266a1f4c4e784a6b14256764d8c766b2e3ea0bd0288dc31b72ea104efaf4f544f7d7e6d3658d44e58c1184bc9f9c163fc935a26613d79d1f0ea19a0927d938a87e77203f5442ea13968b4b35f5e73b62d5356e1d4703f65f6e5d6f49bfe05255383d38a5728bfe47dd13a73db0264dd4846f4ea48a134468ffda03de13b00355a03b6364", 0xec}, {&(0x7f0000002140)="54ee45349a99dbfb7083c7462b2d0f26d216229552e24d01230481d82e6ed1c2bfb17dda8aa2e3e591a1a1ec7bed0c7f2d60f60af0d520f4f2db06fa659485e0e35a5010fddbc0db4765fac9ebba79aa1cf8", 0x52}, {&(0x7f00000021c0)="f7d543bb828d949926e911f26f9f61f8b4ffb1a021e3862313a7ae7afcbee8a966339bbf69825d0de16f8f6f32237eb591a5052b08f3dc7258b43d27d57b9581609231ec25e18528f1819224419e7c3a2bb473c27c5035060104809f054069d9e2d852f0f34b11f9cdc824bc3408cb98943ee80638446c7f1d2e1a61fe747155dd92fd20a2de7075ddd9bdf40a8355296519e0132a55223a19463c62f2408230c907c299c223d38328b037ee9ac6c382aee087dbe909744ca63baafbf607813f4bdc3eacfa27ef7e", 0xc8}, {&(0x7f00000022c0)="bcbbeccc3188df8960c3ee6d8baef9", 0xf}, {&(0x7f0000002300)="d6d7e2523e0c56b58609e8cca28e2bf848f358069dc83194a33d08a920970889ff3d3af1aa96464518feae6acb985ad0ee3b5a00f5961b577f5a174363d56e8ac1a634f100365d685d471bb6ef57c620135708d5bbd537d9d96433d68119968f2ab90ae1d59d4e4cb25c0a95bb4abb8c26d45a94ae791fc918d3264c0d22343f8915ceb6afc79dd6c0129343973bd6a70f4c5bf5a7eccabcacb3d55b99de3fd371c69c88e4b30f715891baf767992f8666d94a1c4344e10aaeaf9902a1f52fde1ad1501e5a5ed8eb112987c75e2bc97377fc21cddf478bce658ae65bc5cf468f34cfea5c", 0xe4}, {&(0x7f0000002400)="521149c98f90", 0x6}], 0x7, &(0x7f00000024c0)=[@mark={{0x14, 0x1, 0x24, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x2}}], 0x78}}, {{&(0x7f0000002540)=@nfc_llcp={0x27, 0x1, 0x0, 0x3, 0x4, 0xf7, "f707e011fc75854dbe9ad616ec1a190e8c432cbe919eaf7d66401ea802199b9c30adc9e8062287ec644c4917d692d8ff55d83427361cb8bd2a032c28caaeb0", 0x13}, 0x80, &(0x7f0000002780)=[{&(0x7f00000025c0)="0349169e168440d8420ef1efcb30d769fcac5db1fa0f5e0091d4a082c9", 0x1d}, {&(0x7f0000002600)="e9805de3263bf212379590b9b28f9167564c19b99445eb081063512757428d10bc034ecaea6e358f6faa1ce739dd4e3069c28fd7a01b94c536ce5b55fd04921ddb2821172a8b48fe3109dd50dffa1f", 0x4f}, {&(0x7f0000002680)="df5f57ae7f82044e5bcd632944edc04bbe8966f7a9f24db6f8961a0825a7e1f251de22103fd1d3016f549ca5f2ee6017c037ac27530f33e8edbbdd8fcb39d5b4998753433300a553c97ed4e790e4dc72e244ae1cbbf76b8dcefde6b254981541fd0a2996cd4d599c4998c9fd3163dc8909bb5cc3b35d075ec3469e87232c475e083da5d7b6621500b0830acaf0fc42547bdce91950c0ef7323da193f6103631b48c409e11d9aa9304a4cefc1c7f2c17c0775f45ee5cd8a527ad573ca05c5b846c7789a1592b9324aec988f6d64c94130b14d90155e81", 0xd6}], 0x3, &(0x7f00000027c0)=[@txtime={{0x18, 0x1, 0x3d, 0x10001}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}], 0x48}}, {{&(0x7f0000002840)=@l2tp={0x2, 0x0, @rand_addr=0x64010100, 0x3}, 0x80, &(0x7f0000002c00)=[{&(0x7f00000028c0)="b55ac1c71ea54156394687e7ea8ce689b5baf08dbe557615f85548dc535e19dc7881ce90d879b48f43b35e4d06b18fa2ebe0c3056fafeed3bf73f6", 0x3b}, {&(0x7f0000002900)="714047ff0b521c83aae50e89bcd656073a3e7fe218137990da23b3dbbb6f9737e7bbabd43f6afc7eadca45246df168797e86338c05604b6785d2d5aaa433f301d91dead209045bc992724b4f3e9ab4f24b899b39b7e243671127b78b13bd5a693a5c5cede58fd50dad0ef9f105597b11ef5f74829b80cc170f7168f4f2da628ff129d15dfa806cb9ef9fc3ec495dddc50d1efca0d1314a765c4e19c05a1b1507156fab06487bd2683864b126c54be325720e75dca07efbff0d8449a75351531b573390c682aecf9da542adf973fcb4af517f62f04dd4ffb336fb", 0xda}, {&(0x7f0000002a00)="ef3e37a6a01efaa6f99d22a79d6d3ae3589956ace3c6e7b65eff83959bc820028fb6c94166420774883b3d0b43d0c30514dff3fb896ad34709842660fbc409a98d102de699962e619b18c8eba787dc1fa830e2f57122a37e31b8b27743e44e4914d25bcb5ca844ccd6344cd6d96e7b9c93930bc110ca1126183743b64e50da1b776f698bd2dddf6db787973190fc9e1cf89acd4b7e0a78a9ddfb62dcabf4ac459d6ebc0ffa880a50e8d96861a73a662655b7ec99ad8694105888ca7d363d4b1076a53bcd4bc3d35633474b26df58e4b1565e6982f158c4", 0xd7}, {&(0x7f0000002b00)="468c127df188c8aefe6e361757f93b272c4959740a6e4612cf22cd27eeab4f3922187ab678fe38b4fa77ca1a778206064aa0ce8a762da0306ee9f43034592791d93f03a59a1abfb408b505436c9fa77a95010c17b0787089385ff78af1453d8dfb21354f7d8f34097b2f", 0x6a}, {&(0x7f0000002b80)="9b66afc67c9a414cf0941af7b79c5486bb20f08edde4fccfb9720649bf6ef2f13357aa6c41baf7429b50c662", 0x2c}, {&(0x7f0000002bc0)="6c493b86221f964d657f666d054b0910d564429ce229c5d70cb1727fa9a80bb4f6f3e74762bbe56bb70eb3308288f7524ae3a65ba82c22d0619dae17", 0x3c}], 0x6, &(0x7f0000002c80)=[@timestamping={{0x14, 0x1, 0x25, 0xfff}}, @timestamping={{0x14, 0x1, 0x25, 0xf58}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @mark={{0x14, 0x1, 0x24, 0xffffff01}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x1ff}}], 0x90}}, {{&(0x7f0000002d40)=@phonet={0x23, 0x1, 0x2, 0x4}, 0x80, &(0x7f0000002dc0), 0x0, &(0x7f0000002e00)=[@mark={{0x14, 0x1, 0x24, 0xfffff646}}, @mark={{0x14, 0x1, 0x24, 0x2e}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0xf9}}, @txtime={{0x18, 0x1, 0x3d, 0x3c8e}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x4}}], 0xd8}}], 0x8, 0x0) fsetxattr$trusted_overlay_nlink(r3, &(0x7f0000002dc0)='trusted.overlay.nlink\x00', &(0x7f0000003100)={'U+', 0x3}, 0x16, 0x0) sendfile(r0, r3, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 19:59:37 executing program 1: openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x40, 0x10d, 0x2}, 0x18) r0 = socket$nl_generic(0x2, 0x2, 0x73) bind(r0, &(0x7f0000000080)=@hci={0x2}, 0x80) connect(r0, &(0x7f0000000200)=@in6={0x2, 0x0, 0x0, @mcast2}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0xc4}}, 0x0) 19:59:37 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x40002) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) read(r0, 0x0, 0x0) [ 798.929417][ T35] kauditd_printk_skb: 26 callbacks suppressed [ 798.929436][ T35] audit: type=1326 audit(1608580777.288:385): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=25981 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460faa code=0x0 [ 799.082602][ T35] audit: type=1800 audit(1608580777.408:386): pid=26008 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15695 res=0 errno=0 [ 799.173534][ T35] audit: type=1800 audit(1608580777.438:387): pid=26008 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15695 res=0 errno=0 19:59:37 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x40002) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0}) read(r0, 0x0, 0x0) [ 799.219202][T26013] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 799.269018][T26013] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 799.288652][ T35] audit: type=1800 audit(1608580777.568:388): pid=26012 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15695 res=0 errno=0 [ 799.336078][T26013] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 799.383256][ T35] audit: type=1800 audit(1608580777.578:389): pid=26008 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15695 res=0 errno=0 [ 799.510952][T26016] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 799.582662][T26016] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 799.623767][T26016] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 799.682914][ T35] audit: type=1326 audit(1608580778.038:390): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=25981 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460faa code=0x0 [ 799.813793][T25970] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 19:59:38 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000040)={0x1, 0x0, 0x700}) 19:59:38 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x80000000) r3 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r0, r3, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 19:59:38 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x40002) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0}) read(r0, 0x0, 0x0) 19:59:38 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x10, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000001d00)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001cc0)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042abd7000fbdbdf25660000001400b9801000ba000500ff00050000003f0008000800b700c40000000400b800c414b9806b01800068040000ff7f7e1505817f080211000000030000000200000001000000379401025e7ef355498b4f2c116c02f85c5b4ad96853dc927b1ab77236aa4a00c9ac0a2aa3c2e8157def3d369e23e198fb6f4a3dfe00ccd871eb848ec1c482b1d982d99b9c0ae5801f4f98dd53865fe0ff7db24601245a0aee27a5f5bbff9f4e0c20aa9b1f4393bc187065a51b0420edf3c94adde7d8547be4b2011a9be32d7ee58df358cb1a92477a29e5198eea227b30b8b12156ee267204ea00dd2b304f826f21c4f8d373c56e29d6714f793aca872db81f7130300a157393797f200f779ec78632b9bf0712f95bd9fa98b3271242585429408406e0f7945e54bff9977591c56577d7501ef660dee2036db25fe36a8ffdb21259aa13b595c0d69cd24aa487f46cf71f145fe1de6ea46512505050505050080211000001ffffffffffff2d1a00030809000000000000000600400009000000060008000000007107ffff00ffff000026050473403cee00fa000e008000d600080211000001080211000000bd5a5997812c01002e08000000000000640008800006010101010101010003010404063f0507000104060201000563096c71bd0cc15db576c1d38c00c7b1955f74b539f3c8cd4857a7dd78f01297fc6c6665d0816abeefbf9baf3d15381acfcc0605ba0998e48a23892e7190be7e5a4a1857af98018e5a3e7e918fe9e1275e326163b77df1690100c129fa0aefac0b7f75912a01052d1a08000a09000000000000007f00010002000000000800000000ef72060303030303037107000001ffff6508760606402f000600dd1a2b2dbd5309a4891e4fd127d58cc7dfcaeddeaab50211d399a4820000e006910085d36d993eb1095876d7b60ed3fb911c83dc8d23285138050a10ea814d1f8387ee41d4b1f625724d30a3f12137bedf39d596a4b20df6ad907000858f4ca0d08f0effb826764dde8512c6d98aabc44f709dac65b3fc69109bacd2c86c923c2e6801f4d152685c0d37c4be558d319bc18195d8b40b1fc30ae6b46ad20783048463f05ca91d49a397e22802e5e334d12b77ba7493fafbf83d54ccd90a1c9f13fc3df9918876e461f078078cfadf05ba460d03a0e0d0a0bffb85ef5495035582da25ef39a31a78c67504168abca77c91338e316b56adfdda8858767a25d19e3db2406d831a245f322c39dbc9813d915a94a6aa726f56784899928844c426159e6ace67dba35159ca111ad9809998ab76cb09a476d729911c9eea9c01bddf10ceceb7f0f5cb2aade4e64377cb89356581b8e28739ecc65ab33133abe619b3f4c4bea6eb6af6186847e9755eb9582c6cc590e2270a6b1f8b46cf48440285753ae9da878b6c786cb8b772a87f37f5519b04cdede75b3feaaa17f40ec61ffdd41ec185a2a9f40b156ed641fc4fb66a93317e0f7410fcdc1eae862ef2fd96ebafb2fcd5b721697fa07cddbdaf7c2077a6c9c058cad78d45bccccce29303012e7897d1dd70ee6ccca99af6f53f316ae775182cb65037cfcb1a3740fd4066d23634545439af090111e584187b69bca0f8934d4ec43930adc48e2e66b07b5a1e083947b0be529b97944d8a3670192886af36ea63e41ea9532815297a0a7c532def9ee10651b9b695e6fcf4009853511346631024c2fcb7bf006eee49e2d3a312cd868629ace69fda4391507902035a8073e192bfb19c51a16d08ec02eb6c3bde14087d5cf316b695a3aad0959e4620fa115971cb055d64188fa1bef1bc7cb869b842711f8cbb2ebb0d350f1c6424b1b7403592fefb5a394ea7180c1c67b2fdd545b734010e1d73c823526c8c0c41b8d7219674026c7263871c7b098c786981448d0ae3f72959bfa9e0ad18d904a752588e601458537348a378ec6ca5ddaaa903726b799c8fa7ade0ed15bece2226424bb56a057fccf4249dfc0ddec26c4742c7bc97a7498bbdcbb924a9f01edeb80854fe0ef48dbec1f27b68340d86bb5f6ebd8904b8c588d4584d6da1db9e7f21070fd56c2f159582240d43e3d77c580ecd77e5e4a0c2653080d1e460a11b82be9d244f5ee11bd057580f31bbdae90b8a471fa68880fc8d1978f4f2c6d2fd1cc4ecd576bf7f4966988c8dbe34c66f7f3b48deda22273f82f6532f423d85a4353448419e1dc32a0213f51b8167e840500f0bcb6b35f951a5e6c52f67105ff591c56b5501b17dc4e43528dee8af993cd550443e4d5b7f4e8af7dedcf4d5337b35f8a07696290eb0e410b4fe938bc50ce8cac64f2dad2199fbfd6853b9e6c2aea22d601496a3ea89109fa489ff9b9cedc120bc2dfa6766db36ee5da33e78eb9b72e968b96d8558ff14634b1175f075d2b1e1b936cd96dfd1feac2ebf24022a02c5ecc95533a2306e16bfa42468a5e1d9dee5f33d4429c169c59f8435f2c7fb52e615aec60a323264fc96de446012c65196dcdda55e970f9f6d6ceeec5dbbf24a033411f65691eb641b376ca1091b41dd7a6ff2dc7358c6d0021d2d7289b3355ec2d14f8e41ea46ea3c3ab6549e30876877d94715c825477010a2ee38acd1e0eb44ab907eacfdf4abeef687333753124b61cda3805e7f0e70da9acbcc89b8443882f64b5597be2685acee0f6e7eb2c7f0f8ee6158b907489a6c13cbc234a3a82a3199820785bfac1cf4344b106cc50229609f02a6cccba5f8a78368c7dc6c28a82e7af7ddc46e69d24d9a757a1f48056305f32ef5c3507d8159d30c2cbe8dca7979033a4897e1ee33454750a6ab91a808ac6ef03bc1ad3ec016c3a09139267404ff2030a8a84aa88e5de93c8043d18a689a28dc6b5db27cbe22c74f02ed5031a50a9e30dbb35224cd6160e857216b41ada971f29afb0e5674397384da42e5b9c0fe817fc748a36d5b52262a705661308d6d90483473e2acac1bbd0b9ab53f4b092614fd9774a94018c768b11ff387bbec768bcb36062cfa82c466ea7afa09502f104ea31a3fddc87509672789014f28c373cad42578bffea97c001e51ac0356fd24403000767d314aad612e4d291ce4f93a3c65ed3d7f115103ba63b220ccba94efccf50358498f892ed062507775a8fef873b8443843bdf3ca2c76694f52c43b5ca66ac41ed20062910ed2a0b7849ab243405368f6b97bea30ad9b098d6e404a350d8287dfab364f5fba4da02dd5133524bc4e2a100f25df7cbb8d7bf92e6cfc5202e24af1b5b290216ed9c4f36323e387c4d5fd71932322798f200c594b6d069a73c7253c2b7d6c33dd98ed7f24bf98a5f1bfc4f00a0c32fbd65c1d3852b316a31c565367a646a942f9026cad7b91e2e603ba5b2e8348ae85b6550fdae6d1be20878221c7f19116b93008f4963be7cb9e022a1772063202910036aeeb95c359150fbea93be33254bc82336cced66b56f825beee42ec9b99db1f0a0828a4cabb11ea312aff488bed9b0533181c62924c548367ba6a23f99ceb09bbae2af444c94f035fc869e2d99bf51b1643bc29bdff24cc676c6c755dd0064360aecc4cc547d927a2d66f1f7bbd07ce9097a1ea37b34e5284a4ddd3c8822a0c557d42af1b99129979e27379f235acc3ff9272f080f7a69a6e370b642e9a9752bedc9de7c20c6ddf60c66869c935cc9e02541a758baf88d27beb9330d46ed113f328bfb9d59a670e99986a1b38579feec3bb4d3f8087b406e364697191fcefbcde219b8117df6dae5250a90f6d0d767a1c947b3012227e301d66ca8a3e0a4bd950fbe54c1dc973badf6200f1bda730126dc41b7bddf7ccf7bc6bc4f8efcd09fbce3d92e3d302caa266d6b5ab9ebb8d62daf77fb47000c13ee5b4ef653205e7a45662286a05ad8c324cdcc3d14b839d3b317f22f4c869410f01094469002b47f9721367fd5abe75a1feb11acda4aafa232759e809b1b2845939f4d929822eded48824876de03b0c98e10ed2ad3618faa0b45376b56760d256576dac9ff05c84ff873aee185a4515789bd1c81936ce521bed701fdd3b2a03265a4af61604d3c23ade4c8927f8128e3408cb4b4e7d749ba627294c7b0700aa7634781425a8b350cd5bc00d4f21ca796ab87386d74a56ef53dfc2a85f57155000d175c9392f7967c2e8232feef7375fa9ad8999a8222b8a6f99e8a1d70be1ba7dc7125dd74edbe082c6836838d2305e723e65adbefa5b00000a017f0082510106ff070000000802110000010000000005000000f3c100000500ffffffffffff2000000000080211000000503e000004ffffffffffff14e7000001ffffffffffffb782b60b00ffffffffffff03000000054a050ef8d9e69f13d1a880f1246ad867151a992458a7f2075a55774f60cdb08e47c864e8a1c4d7b572e1a9ad2f7ca96a6cc4f4b0c73adf936efb1869160298ba9d8009db9541b96e16f33fdd65767273f05316312d952feecaa33d13c2e8c0873641d7a8d63ebaea1859a628323b750add839d9423c9797729b207afca2a29b5c1e5199b85ac2ab901ec1e716e1ef409d7fff5e1092da1db102d990598f2dc1ad5356b7d36dc45c8b87cb8f823bdd51ef54a00002b010f007606d24014007f00ddf65d533570d31024c0c6653b632a4fb082deeaafaa41bf6a8d20102efed5ecd0e460380bb2c26e98aa6e8b9ad6f3eca0b2e02a7759ed17fbe7df4621ab94d52ccb4834459b2040c8e770f0910547e363df55fe8a4ee50bd45d40ffb96ade0e83c5fd961e4f5ae59470ea4ffbbd51e3663136f6b69f2a90cc2cb512a7e19037e2b29a67a7e3d4a9771cea25cc2b56d6497fbc25644a63e4b239f1efb55e802095aa3df71c4f888950c60baff867cd5343e13911d6369dc161885f6f6eb343a7d8b5289ad4c0487a00ae879e1152b85709825dd6b0013d6b233b8d149a183c3038c04d452ddb8fc1ed066cdf5e67b1eceb0768173e14b23b832540670008021100000000020000080211000001ff01000085040000ffffffffffff0600000000cb007f0001028cb02a010437a205048d569ff72c198fb1e18a82c8db7a98438ae6d925070190c84b9578c74fdb3480f9e716e719653025f008840876ed60068ef846f561df63a4bfd1804be9c4114143cdbf32b12cc0cf1cf315d9aaac17210323c5b9f44e4576d2ead8fb3c4f5b4a50146ef03b426b64f5b02821599b1734c0f27637ba02109bea73e9fdf25a7d65bc7157f71b501a040274820113526d0385bec697f241bf1b9333ad81e6ce272b2d1a00101304000000000000000200090006000000010008000000c500a5000f008c10b807313b05a7c52a8aaaf60824dded608468ca06000802110000001314000025004008021100000105000000080211000001200000080211000000010100002f004008021100000000080000ffffffffffff190040ffffffffffff2000000008021100000036004008021100000107000000080211000001160000060202020202023c0401ffb1093e01007107ff000000003f092a01027206030303030303000000c503910037a4f86edeab2d1b0cae20833622c8fae76b567a4dd4839c10015d098d171f3e347dcfc53d9a02ecf1c3bf1bc0b44c5a48d5d91b59fa9637568dde9a7d038b5a3689f9185ca59d9e01fcd60b521649e709b5b16a146faebeab77b190b840eac4b3b4d3976b700a19024865d6aa93e1131edc8e5ae62c31c82452f14fa5357b20add7c061ac6af38ec8ef5044d7eea8867651cca23f67b0f5505cefb0e4bf191be38efad842f1361eec9fbef805b25978fec0d72f942bf9c6bcfcfdeb37ac42aa665b6d7e24ce57ee3bff979f0c0cc844e1f7270a4675a7ae253d38c38385e4d2f03709c8c9cb599e4d60408866bbec2e95df9b31258dfbf37968a7d1db10e42b5b7a64d18d0be70a2d8538c5b738f199753a2ab734769d6fdb28415331b808972213590720d910d9e9193f914552ea4b3c0d82f0760375b7293f1a13cfc74d184f85e0ff4da8387b6fe205f6a7b1bc57bf98d09e232905d67fe08811f905dbf42eba877631691065c693162cf077d23eb890e50e9c1336345c87f6cb61558aea38fcc9ef0692fab542379dbf7a0da82ddebb29913a7d9cf0f02cf4ac328d650ac0026eedcf67ff9a51411d038119c1ed63f8309068c4b09088c6bf6b00f2c93476905b6ee8950070838ba74c507041b43ba217cfedaa2158de7afe55080489d41b22572c177df48352ec5ee79b5c9cb39a184d3a30cbc4e3849bb8dcc04b051ff2d27188d37ed5323670520f9cb38c689c9d4fd7de2b3277b1914fd8290769c0a026e6872a23a86570e4bed63566d800b80396503a243cfd31748da0ff0f2b578f7617bfd1750e7e48f54f606df0ae454cf5afd62ce80fb57559aa7c87eeb9f3fcb806af4a51451184a063be33c100c35f8435d44bb5062167249ca34410b606bb875523a99fff27f81ca2b67fadafd2c0111822e99cca504321d11ac20667deb6d7d48536d71b9eecc63747c37c756fbf716d825d7e26ab1202d2d5436bde75a136909c0173deb2d8ee9d6affe106e81105ea429a195e24c275db4c82cc91ef8bfb04c33ae038e9482fbfd643b08a0025e7c49793c87344e0419c42a6b577804295f0902b66e9b1824393bd8f19c403dfc90206b4cc45922e345b8abcde5ef2c30a1c74a6361a6e7649315be4f24b4ab7c8302dfdd2d2cda2a9a7425c1a39c937c1cb601b93c38a5e72fdf45cec3ec1362ba73c4dcd6887e6f0c62b70521c0abfb0c73de213f33c3aae1e62b579882e2e266f3b25e8c0203ac6f395763c5822d6b88b56ae5c8ff03ba7b5e1f62e5bf2143e78cc271f562867132f727ecdc6fe57a01165cb22183933481779cc7e5d26768776f7af3bae9a7e74d7304d9e70a42a000000ce0191003e292fc24d15aa960587452daf38a83a39cfb9febf89cb3fe5daf4f1d495cfa05b5f3455592af970aab58d3e41d7d129153cdcf164a9ba4b0394d594fe9363c486fd451d5c68a2db7972265854dbf6727742af94b0594e3a933b38ea9bb43dc91ed680abfbfd929995dad90a1fc78ff9e8759f39606ec6676d0ef448aaf25624b90090439ef8ced4e185fcfc2be0764725164ebe3f620b3093a8b47bbb22ff9ff839ff62dffdbab8a80f88a669158aa5ce8a8748691e39285414ae9a5ecd4d3104f99d29fc4f3c11256d09c67aeb59c065c848b5f12186eb682cfd4941359d9e1eb7739c622c1312f407773d4edbd88e92dec59f6785715ade7d36c049f44d333be2330bf24d62d029601b3354f2904c10dacd73d2031c661e5babefccae60a056db8639ac6f5c8b51fdfdde8e9ee612c22d7af65bc009b0477e3ac3165c75bdef4c849f6ed9187abd71163312253e75c758d388893ade4412090e27cc328ecf6015adae75b7415f407e7dd204f9d9ff3ef92203778cec1e95999e14eb57b1d729a74be2e9eb6fec4e31a688101d373666564337f816791069d21528621591f98ab9d4ded70365ebfa95ae694801b52dd353c3bb413def7dc2c5842edd838301efffe66b3ab569f0f08500000400b80008002201ca00000005001901080000000800a000090000004006b9800800bb007f00f9ff1400bb007f0078dffffff9ff0800810002000700d3010f0026e13c20097e43c1a51002a1f7117d9ff61b209e33d1e3cc5837be60746dc79e1a136d3841f6273a346f5268d39a355f734f7c2e71fc96d422d7dfebbc80c7140599af8ca436728023c6a51b73e2bd33ab74a0a09af1f283902b69045987093c394d8437253ef9263280491d85cad30454ffbeb8d4d684589ccfa3f66c7d6b768e3846da001cd6ffe5cdec9ec35454f06cf0daf21209faf9cfedf904d0859bce8121fc06ad5f7665cc8b256e164ab5bd8e47c2e1a937dfe24b62ad6edce6e69dc3f9aa99521908b42fe81629f53b1980975874f9845c95a5927b31b5e9a448933b7bae05e2fecb07a0b1a4da356bf8207a0ecbe614c6fd6e7ebfde4cf832d666d3701fa1afa7a3ddd965f5314322586c6aee24bb99f03f7747046cc014c3a22454bfdc94cd47253713fdf04ee55d62d969ab3d372144150ee5ee3b6179701499a50789a51ff4e39756d8ca5ae9a9160634fddb7ede04fc92b8f79c9229e81ee9e8c33b79857e78a4058443f68509cc2657774ba5f26b1ef6b1bafaa844a612c27122314aed6b08a56dde0ad5f9bbaa34a4e8f06b2373cc0ef7500e96ca0f54a25ff8006c985a0c1335d32623441e08814a8800d126faa4667a3f30f2ddd5e6832f335f0343098d72060303030303030042002a00843c09040008021100000007000000310000ffffffffffff070000001e0000ffffffffffff6fd300000600400802110000000000000008021100000006000000530291001c1aec3d86674a56274487c849f0285b314a49f9a9880115a4c96840370820de6524b759028bf8e4b33355ac38916ae4e607e8e199f499f8cfdcd788a03127d230ac62aa5c3350186b0959c7023256200431a0bfb3e7f66d57de2be47c1ca385e8483cc68df6d59c767b6f59acac71fdc768bc6e8ece4a8852ec932d661ed44483e25da603f778fbaa959f0649a226961e3f65bf8d8d5d5258f0f64872083f035cd6567e97730971acad5d54631eca0a347cd943ee5be279189b19d683b79783b0b30cf1fe756dbca5f4c66f57cc4de6c93d3e4bfefaec5b0d5e7bede02225ebba6747d09380ad6ccdd9a38b3515e334e617883ac4fccbf31c050d5589bac3099e18257fcbd78c5d53ed20917264c3143537784adf66d05202ea3a07ee6ca05976b6ac059d493aa6efd9346060b216ecc579eab4c7814bd631ac662c120b028a8595af8cbe73598e2a13ff2ff50b1f4c8ec99ca122a438bdd880cdfcec56f132b5d179c5f7c7e5e7bb3c3b8ebee6c7e0bd0a8c51d573e411fef0ec83f251b3faa2e75ca005e5a715e23c96a9349a1cafc262e65a38bcee148dd37ebeef3165620fa3bddd649211a149defac36fca7f8ba84f427475482d0419f0547016d441fc5421e7e2e95c39ed4f1256c40b279f87efd326d900f5c67b526f041b12b6c54e5262974b5e33cd127f517c846e2aaa25bce162eb370dbfdd5eabae890f654943372a211530a05212b7021cd3111a586d1c9647adf383acfb89f5c3cbe15281a0db1b69e711cd5ee418323c1569f97ed0c164feca049a3a2d63dd4b5099fb45156b4b0eff6991a815ca059fc77b22250092010f007206030303030303dd2ce84424173c667a0723086cfa6001604817ec15b2237dffcb224ef8dc89b0237d7396dec52d0574638fddce5875160100070005004c5c250d438e88d45a1ee79a80f04652266a030103d3e516d06a4ae5a47f8849001c87d20965118f76b034e48cd9e23fbde2df6b236a4d792ad078f17011f2754ebd384de48db82224d8bc862603759aef8cae2e07fc1260f95f407e6c8bbcff12a8d96f7dc0116d1071131a6aaed0d89f8aa99e082029884622603f2d1a00080d0300000000000000080009001f0000000100ff0300005e37b27b07bd4c08384d73dec5e78ad9bffc4a3c686f29d92904686c899ecc63e584de25adca8aa6ef282a1029a58945ab80af2f17b1168769ed2d088af0eaba41fba8fb16f9c630e7c645addaece387d7e279073c020d815ca8f30d716037eb444f5ce3030c5849c7c86f8c7358ff8f2e8604157f239b5c884b9686b7e95dd004fd3909b90b3ad65601042c15e7ea0116697d0594e3c72a308ddb4702883ce8db92c0f46b77d2020410a8bdbf02066c9f0a8f65b30602070000000600bb00080000000c00ba0007000180000407000a00ba002e000104fe000000"], 0x1b54}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = gettid() clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000040)={[0x4]}, 0x0, &(0x7f0000000000)={r3, r4+60000000}, 0x8) ptrace$setopts(0x4206, r2, 0x0, 0x30000e) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305615, &(0x7f00000000c0)={0x0, {0x2, 0x6da}}) 19:59:38 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) symlink(&(0x7f0000000140)='./bus\x00', &(0x7f0000000280)='./bus\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) r2 = dup(r1) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000180)=0x80) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r3 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r3, 0x0, 0x80001d00c0d0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f00000001c0)={0x2, 0x7f, 0x6, 0x5, 0x81, "042bfd324c520a69886d65dc6d5b657becbca1", 0x6, 0x4}) creat(&(0x7f0000000040)='./bus\x00', 0x0) 19:59:38 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x0, 0x0) bind(r1, &(0x7f0000000380)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) [ 800.434194][ T35] audit: type=1800 audit(1608580778.788:391): pid=26032 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15695 res=0 errno=0 19:59:38 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x40002) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0}) read(r0, 0x0, 0x0) [ 800.502762][T26035] IPVS: ftp: loaded support on port[0] = 21 [ 800.530714][ T35] audit: type=1800 audit(1608580778.818:392): pid=26032 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15695 res=0 errno=0 [ 800.832112][ T35] audit: type=1800 audit(1608580778.858:393): pid=26037 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15770 res=0 errno=0 19:59:39 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x40002) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) read(r0, 0x0, 0x0) [ 800.940300][ T35] audit: type=1326 audit(1608580778.928:394): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=26031 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460faa code=0x0 19:59:39 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() rt_sigtimedwait(&(0x7f0000000080), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r1, 0x0, 0x30000c) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) 19:59:39 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x40002) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) read(r0, 0x0, 0x0) 19:59:39 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) symlink(&(0x7f0000000140)='./bus\x00', &(0x7f0000000280)='./bus\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) r2 = dup(r1) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000180)=0x80) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r3 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r3, 0x0, 0x80001d00c0d0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f00000001c0)={0x2, 0x7f, 0x6, 0x5, 0x81, "042bfd324c520a69886d65dc6d5b657becbca1", 0x6, 0x4}) creat(&(0x7f0000000040)='./bus\x00', 0x0) 19:59:39 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000020806010200000000000000000000ffff140001000f000000"], 0x1c}}, 0x20000880) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f00000000c0)=0x1) r3 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r0, r3, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000100)={0x0, 0x0, r5}) [ 801.812153][T26035] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 19:59:40 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000040)={0x1, 0x0, 0xff00}) 19:59:40 executing program 4: r0 = gettid() rt_tgsigqueueinfo(r0, r0, 0x18, &(0x7f0000000080)={0x15, 0x8001, 0x7}) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000100)={0xffffffffffffffff, 0x4, 0x9, 0x81}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r1, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x1a8, r2, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0xbc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc27e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x800}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff045f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x850}, 0x4000000) r3 = gettid() rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r3, 0x0, 0x30000c) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) 19:59:40 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x40002) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) read(r0, 0x0, 0x0) 19:59:40 executing program 4: gettid() clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x30000c) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(0xffffffffffffffff, 0x4144, 0x0) 19:59:40 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x4, 0x628, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200013c0], 0x0, &(0x7f0000000080), &(0x7f00000013c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x1, [{0x3, 0x2, 0x86dd, 'lo\x00', 'sit0\x00', 'team0\x00', 'veth1\x00', @broadcast, [0xff, 0xff], @multicast, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0xbe, 0x10e, 0x15e, [@nfacct={{'nfacct\x00', 0x0, 0x28}, {{'syz1\x00', 0x7f}}}], [@common=@log={'log\x00', 0x28, {{0x81, "721a51980a54d8f933b94adfd9578b4d1e299276b307a066dd2a8cd605d9", 0x3}}}], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0xba91, 'syz0\x00', {0x4}}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{0x5, 0x18, 0x8100, 'veth1\x00', 'syzkaller0\x00', 'team_slave_1\x00', 'veth0_macvtap\x00', @local, [0xff, 0x0, 0xff, 0x0, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0x0, 0x0, 0x0, 0xff, 0xff, 0xff], 0xae, 0xae, 0xfe, [@statistic={{'statistic\x00', 0x0, 0x18}, {{0x0, 0x0, 0x9, 0x9, 0x8, {0x9b0}}}}], [], @common=@log={'log\x00', 0x28, {{0x67, "d7518a1d8233abf64db42f75370139ed8670be30b65d2b47067c549ff33b"}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc, 0x1, [{0x3, 0x10, 0x1, 'dummy0\x00', 'bridge0\x00', 'vlan0\x00', 'batadv_slave_1\x00', @random="b3a897cc6b34", [0x0, 0xff, 0x0, 0x0, 0xff, 0xff], @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff], 0xde, 0x13e, 0x1b6, [@m802_3={{'802_3\x00', 0x0, 0x8}, {{0x16, 0x1, 0x3, 0x1}}}, @time={{'time\x00', 0x0, 0x18}, {{0xfff, 0x80000001, 0x13891, 0xfffffa95, 0x6, 0x0, 0x2}}}], [@common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffd}}, @common=@STANDARD={'\x00', 0x8, {0xffffffffffffffff}}], @common=@NFLOG={'NFLOG\x00', 0x50, {{0xffffffff, 0x5, 0x2, 0x1, 0x0, "2f8b93a76f8d7d6447be2c9b41858d22ccea2086062fe02341c19362759c28fc19a14d541521951360fb941c94085bb361bc27b9b5925d8ca70bca60f37d81b0"}}}}]}, {0x0, '\x00', 0x3, 0xffffffffffffffff, 0x1, [{0xbdf0d6146a995703, 0x10, 0x201, 'bond_slave_1\x00', 'bridge0\x00', 'batadv_slave_1\x00', 'ip6_vti0\x00', @remote, [0x75cd99cc6d9c36d2, 0x0, 0xff, 0xff], @multicast, [0x0, 0x0, 0x0, 0xff, 0x0, 0xff], 0xae, 0x126, 0x156, [@quota={{'quota\x00', 0x0, 0x18}, {{0x1, 0x0, 0xef46, {0x4ca}}}}], [@common=@nflog={'nflog\x00', 0x50, {{0x10001, 0x4, 0x100, 0x0, 0x0, "348f729f9a2dcb34a8d4e5b7be36abf9f14bcfce2782948430593e23409039eebc5596ec11a8239eab950985c1cee5316ab0c7bf29f5058404f436ab035a5fc3"}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x9}}}}]}]}, 0x6a0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000023c0)={0x53, 0x0, 0x6, 0x8, @buffer={0x0, 0x1000, &(0x7f00000003c0)=""/4096}, &(0x7f0000000180)="5af626cf3483", 0x0, 0x0, 0x0, 0x0, 0x0}) getpeername$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000040)=0x20) 19:59:40 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) bind(0xffffffffffffffff, &(0x7f0000000380)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:59:40 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x40002) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) read(0xffffffffffffffff, 0x0, 0x0) 19:59:40 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x6, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$DRM_IOCTL_CONTROL(r3, 0x40086414, &(0x7f00000000c0)={0x2, 0x8}) r4 = accept$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000180)=0x1c) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f0000000280)=""/195, &(0x7f00000001c0)=0xc3) r5 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r0, r5, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) [ 802.503139][T26109] ptrace attach of "/root/syz-executor.4"[26108] was attempted by "/root/syz-executor.4"[26109] [ 802.548262][T26111] IPVS: ftp: loaded support on port[0] = 21 19:59:41 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x93a, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x48000, 0x0) ioctl$KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000080)={0x6, 0x0, [{}, {}, {}, {}, {}, {}]}) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00222200000007040eccf7a200000720001700a00bd7097267f18f"], 0x0}, 0x0) 19:59:41 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x40002) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) read(0xffffffffffffffff, 0x0, 0x0) [ 803.074728][T24078] usb 2-1: new high-speed USB device number 11 using dummy_hcd 19:59:41 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000040)={0x1, 0x0, 0x1000000}) 19:59:41 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x40002) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) read(0xffffffffffffffff, 0x0, 0x0) [ 803.334476][T24078] usb 2-1: Using ep0 maxpacket: 8 19:59:41 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r1, 0x0, 0x30000c) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x40010160) [ 803.448557][T26111] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 803.457369][T24078] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 803.514858][T24078] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 803.575814][T24078] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 19:59:42 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f0000000500)={0x2, 0x7, @status={[0x1, 0x9, 0x603e, 0x7e07, 0x3, 0x10001]}, [0x4, 0x1, 0x7fff, 0x7, 0x2, 0x7, 0xfffffffffffffffc, 0x200, 0x80000001, 0x1ff, 0x80000001, 0xb3b, 0x1000, 0x7, 0xbba4, 0x19, 0x2, 0x6, 0x1, 0x9, 0x3, 0xffff, 0x2, 0x1, 0x20, 0xfff, 0x1ff, 0x80, 0xffff, 0x0, 0x2, 0x3, 0x8, 0xead, 0x7, 0x20, 0x1, 0x80, 0x4, 0x5, 0x9dcd, 0x8, 0x1, 0x5, 0x7, 0xffffffffffffff81, 0x80, 0x4, 0x1, 0x0, 0x3, 0x30c, 0xb62, 0xfffffffffffffffc, 0x5, 0x5, 0x0, 0x9, 0x4, 0x2, 0x80000000, 0x6, 0x24263366, 0x101]}) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) fcntl$addseals(r2, 0x409, 0x6) creat(&(0x7f0000000040)='./bus\x00', 0x0) [ 803.630393][T24078] usb 2-1: New USB device found, idVendor=093a, idProduct=8001, bcdDevice= 0.00 [ 803.662685][T24078] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 19:59:42 executing program 3 (fault-call:2 fault-nth:0): r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x40002) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) read(r0, 0x0, 0x0) [ 803.691345][T24078] usb 2-1: config 0 descriptor?? 19:59:42 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r1, 0x0, 0x30000c) wait4(0x0, 0x0, 0x0, 0x0) write$snapshot(0xffffffffffffffff, &(0x7f0000000080)="38a285707e73228708ad002c70fd12b7d779dc9666691764effc4811a41b5da544f3be1946d2aee2491286476ccd51fb75d99631b35f8d51189595d214012dfba4696f271c6053c66acfc282db27bf6690163bd4e06c78deebb19cafde8af20688e36c276d33b2b7ba582c3cff14123c9e28e15c4aeb0c665bdecd5be997e468a05b9a5da99dc65076032252ce7ef2c2fea075aa1fe656fb8adebbc205fa37da169f1eb5f1b32eb8c15c2e9683e2dfe31359c12ad33de948747484", 0xbb) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) [ 803.978487][ T35] kauditd_printk_skb: 19 callbacks suppressed [ 803.978504][ T35] audit: type=1800 audit(1608580782.338:414): pid=26179 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15695 res=0 errno=0 19:59:42 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) bind(0xffffffffffffffff, &(0x7f0000000380)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) [ 804.025336][T26175] FAULT_INJECTION: forcing a failure. [ 804.025336][T26175] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 804.071314][T26175] CPU: 0 PID: 26175 Comm: syz-executor.3 Not tainted 5.10.0-syzkaller #0 [ 804.079829][T26175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 804.089946][T26175] Call Trace: [ 804.091302][ T35] audit: type=1800 audit(1608580782.368:415): pid=26179 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15695 res=0 errno=0 [ 804.093245][T26175] dump_stack+0x107/0x163 [ 804.093319][T26175] should_fail.cold+0x5/0x1f [ 804.093357][T26175] _copy_to_user+0x2c/0x150 [ 804.126215][T26175] usbdev_read+0x608/0x760 [ 804.130676][T26175] ? lock_downgrade+0x6d0/0x6d0 [ 804.135568][T26175] ? do_proc_bulk+0x710/0x710 [ 804.140286][T26175] ? security_file_permission+0x248/0x560 [ 804.142716][ T35] audit: type=1326 audit(1608580782.428:416): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=26176 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460faa code=0x0 [ 804.146047][T26175] ? do_proc_bulk+0x710/0x710 [ 804.146088][T26175] vfs_read+0x1b5/0x570 [ 804.146123][T26175] ksys_read+0x12d/0x250 [ 804.146148][T26175] ? vfs_write+0xa80/0xa80 [ 804.146174][T26175] ? syscall_enter_from_user_mode+0x1d/0x50 [ 804.146213][T26175] do_syscall_64+0x2d/0x70 [ 804.146237][T26175] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 804.146268][T26175] RIP: 0033:0x45e149 [ 804.146290][T26175] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 804.146313][T26175] RSP: 002b:00007f1a1c494c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 804.146338][T26175] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e149 [ 804.207787][T24078] hid-sensor-hub 0003:093A:8001.0003: item fetching failed at offset 19/34 [ 804.225054][T26175] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 804.225080][T26175] RBP: 00007f1a1c494ca0 R08: 0000000000000000 R09: 0000000000000000 19:59:42 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) sendto(0xffffffffffffffff, &(0x7f00000000c0)="388c77b839276d036425537f0052db97647d8b6ef15782c7a67327254303cb937d163c767ef145f7022d14c43d53685c32561ed2d7550b78a795739de62681da42a82612f47812fd6f5149fcaaccfdc28a054b1b211b7261a6e263d70283666bf5fc611c0f8b968b8b8768468931e74ea33e05c0ee551d5a369f4b12f485df9b", 0x80, 0x20000040, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./bus\x00', 0x0, 0x807a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$6lowpan_enable(r4, &(0x7f0000000180)='0', 0x1) creat(&(0x7f0000000040)='./bus\x00', 0x0) 19:59:42 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = socket(0x10, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x30018000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000000a14000225bd7000fddbdf25080015000100000008000100010000000800150004000000a5f5934b39f7f860d0cb0041576bb976fb170367f91a2e95b779f78ce63519566c89ad7bc02c74391461c6e0074244fbd668d140dcc16b07bf5667093fa564da2239d19ff6f71c9c8ff36764"], 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r2, 0x0, 0x30000c) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000000c0)={0xffffffffffffffff, 0x200, 0x5, 0x3}) ioctl$PPPIOCSMRRU(r3, 0x4004743b, &(0x7f0000000200)) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) [ 804.225095][T26175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 804.225108][T26175] R13: 00000000016afb7f R14: 00007f1a1c4959c0 R15: 000000000119c034 [ 804.339341][T24078] hid-sensor-hub 0003:093A:8001.0003: parse failed [ 804.350500][T24078] hid-sensor-hub: probe of 0003:093A:8001.0003 failed with error -22 [ 804.408739][T24083] usb 2-1: USB disconnect, device number 11 [ 804.451945][T26189] IPVS: ftp: loaded support on port[0] = 21 [ 804.511942][ T35] audit: type=1326 audit(1608580782.868:417): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=26190 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460faa code=0x0 19:59:43 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000880)={0x10004, 0x0, &(0x7f0000ffc000/0x4000)=nil}) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r1 = socket(0x10, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10010000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x68, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x40, @link='syz1\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x84}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000480)={0x0, 0x8, 0x96ee, 0x1, 0x0}, &(0x7f0000000780)=0x10) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00000007c0)={r2, 0x17, "85d00775ed5dc02a27667d438d5d5ddbd5b37d7f096afe"}, &(0x7f0000000800)=0x1f) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x2180, 0x0) sendmsg$kcm(r3, &(0x7f0000000440)={&(0x7f0000000180)=@can, 0x80, &(0x7f0000000100)=[{&(0x7f0000000280)="3fd7dae0c5a23dc7b98b1242ca6b01c3d09a6538cfc9a8943aa3a19cf56f1fcca68ec94a479e94ab9163a98cdc2428c57933f3d43998c04266d263d763b5281762efb7f889ae3069eea50ce09d4e189dda5fdabfddab92548d2856a8d2f87d13e63aa29fb02900ed0ae6cdf5f8c9bd8425a133fcbdeac19ca088104303d5f84d9d00a11445564b9ab147636fb5fa5cceaefc90b2cb7e216825cdc2dd2b1defb1e39050446fec9c1d8e3140b5faa9f211da85bba70179848133531d0d7b39f6ced0b3076121b74c66b3cc224d7de521cb80", 0xd1}, {&(0x7f0000000380)="d666586ef6f5e1a8cac265057903001f9c9cb68fd01373abf870c723bb3c6ffaa41691bc0dc819bb37189dc82dc2b6ed45027279acac86b7a7c116f7abb7853422832af3c21de640eceb496534847bb49dec1d5a6b0721b210a5287aad88ff1b98800189b3b2e7260b7810dab3c5846122d01e4da5320d26f699ae84a816263c2a8c16c4eb77ca806f5186bf2a98c9d46d3e156195c7d0e7e84921efeeaf198d0aa3e3fc09edff67ad9b9066c3a9", 0xae}], 0x2, &(0x7f0000000500)=[{0x58, 0x88, 0x1ff, "74c4dca5a442d20a96930ccb50e7466d91a9bbbe599e7734a8142b748b431ff7c3035261a4603686c4ae0d6cb0e8c44b392ce25de67a3bd3714d51f371c80e780293"}, {0x100, 0x12, 0x3ff, "4167d86ef1a13673b5c55fccf4c139254e300cf9ab5d0fa1a4e3197ba6e0f5595c1b18863e10cb15fe423d76896e0c08a9a7ddc0f537876004f2e4510b4ddca331454e6cf8d44e7258a85b2c06ccbfb1daffed9cc0e07f2661829cff54024a383c9edf57035db261dc216baf20f2570a6bed5c82f6ecde6854cf50fdba95ec7115565990d0989e16d24f043763c6560715c77db7f9602c9f4e7460b379db8cd661099ab77e12d7f2472acf8e69fe7828077b13fa6c4d8ad50e31781677315be3edc1a54851876650ad2ca08a51e724f19f29599963b47c61916b1d54baa6d729350d667e36eacc1e821ac4"}, {0x28, 0x103, 0x8, "d8241504b31eb35b17e75a9b5dfaa809b240a14cf81b"}, {0xc8, 0x1, 0x0, "618ed29143f7a082ef6a2b3729b5c8a1acd79323d7363689211aeb282ccf20e860c7187bb20f5fc306532dd3291e0e6ecc9de0cffbe8c5fad50f42a9ab494e8b9471050128bcced7fe3d86d5953c5c9665f611e36e4bb5ba8c1be80069619544495f25da89cef166c7b46d0216a5e1b7196f095b16ed363ea68035d649dbd5456d85bb703e5626ea736b7f82c3507dd292e12d28022747d985539cb114cf1e18a1e3f540ec5cddb5609727adaf91393696d9"}], 0x248}, 0x24000016) r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) r5 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r5, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r6 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r4, r6, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) [ 804.827063][ T35] audit: type=1800 audit(1608580783.188:418): pid=26229 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15695 res=0 errno=0 [ 804.896964][ T35] audit: type=1800 audit(1608580783.198:419): pid=26229 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15695 res=0 errno=0 [ 805.182046][T26189] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 805.194407][T24078] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 805.434429][T24078] usb 2-1: Using ep0 maxpacket: 8 [ 805.554582][T24078] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 805.567382][T24078] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 805.579492][T24078] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 805.593936][T24078] usb 2-1: New USB device found, idVendor=093a, idProduct=8001, bcdDevice= 0.00 [ 805.618337][T24078] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.631263][ T35] audit: type=1800 audit(1608580783.988:420): pid=26231 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15695 res=0 errno=0 [ 805.670668][T24078] usb 2-1: config 0 descriptor?? [ 805.694750][ T35] audit: type=1800 audit(1608580784.018:421): pid=26237 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15695 res=0 errno=0 19:59:44 executing program 1: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x100, 0xb8001) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='sched\x00') ioctl$PPPIOCGDEBUG(r3, 0x80047441, &(0x7f0000000400)) r4 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x40180) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00') sendmsg$NL80211_CMD_NOTIFY_RADAR(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, r5, 0x4, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x37e10dce}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3c6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x130}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xf4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x4c}}, 0x48014) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000000)={0x80, r2, 0x1, 0x0, 0x2, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x5f, 0x33, @beacon={@with_ht={{{}, {}, @device_b, @device_b}}, 0x0, @random, 0x0, @val, @void, @void, @val={0x4, 0x6}, @void, @void, @val={0x25, 0x3}, @void, @void, @val={0x2d, 0x1a}, @void, @void, @val={0x76, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x80}}, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10004}, 0x4040098) 19:59:44 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000040)={0x1, 0x0, 0x2000000}) 19:59:44 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x40002) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) read(r0, 0x0, 0x0) 19:59:44 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) bind(0xffffffffffffffff, &(0x7f0000000380)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:59:44 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r2 = open(&(0x7f0000000080)='./bus\x00', 0x1c4103, 0x80) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000100)={0x87e, 0x3f, 0x4, 0x4, 0x280, 0x9}) sendfile(r0, r2, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) [ 805.883110][ T35] audit: type=1800 audit(1608580784.238:422): pid=26249 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15695 res=0 errno=0 [ 805.905113][T24078] usbhid 2-1:0.0: can't add hid device: -71 [ 805.911664][T24078] usbhid: probe of 2-1:0.0 failed with error -71 [ 805.928049][T26247] IPVS: ftp: loaded support on port[0] = 21 [ 805.984710][T24078] usb 2-1: USB disconnect, device number 12 [ 806.031468][ T35] audit: type=1804 audit(1608580784.298:423): pid=26249 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/newroot/548/file0/bus" dev="sda1" ino=15695 res=1 errno=0 19:59:44 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r1, 0x40044103, &(0x7f0000000040)=0x3) clone(0x22004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200, 0x0) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000001) exit(0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000000c0)={0x0, 0xca, 0x78}, &(0x7f0000000340)={'enc=', 'oaep', ' hash=', {'cmac-aes-neon\x00'}}, &(0x7f00000003c0)="917d788b1b9b8cbb8109037eb7810a7449dda918496f141787ef129b7b68e2353668b053c96dfcb6f3e9721fff07e0b198df1e4eae787e5f1218a86395ae0048f0dad61248af95c3ca077ea1cadf5d2e33e320fa7abd3f41a913590c260d62ca74253b464836e6c0715d30e92b1f586e85856a5fb0b49d3f605ee2707fee84ba120ce31289afc8c968eedd578949bd99eda17e8781dbb505b5e0f3daf74d830e7080e50da2a91e5cb0bee9bd30eccafdcdaa3d90889e109c5da35b674cf7888f710a4cc583a9f166bfcd", &(0x7f00000004c0)=""/120) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r3, 0xc0045009, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000100)=0x9) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000100)={0x100, 0x0, {0x0, 0x3, 0x2, 0x0, 0x10000089}}) setsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0x80, &(0x7f0000000240)="4029831dc22660d162c1fedfe1ee1db36f55b8d6354332ff9cccbae8c6470875681dd305fe362d884fa361f122aced1ef696c1e2082910ddd955588d5490dc436b45d214c64f70ea713d59c3b020e7021b0f19a8ed9e09d7531c0f98c2f2671b6557b393688c3afcb232adc3df05a2423c7097add0f7c6c049b10bb57f86b1308347dad5f14bec0f2a0eb81a8c9ef048ca0219be1a6ac6ad525100fc35bce153199262cd74edbadf25733d61de7b412f968e99b37c1268d17088cf3d63114d4a769958462434f752444586e2ab86309f", 0xd0) 19:59:44 executing program 0: close(0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) r2 = dup3(r1, r0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x17) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000580)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}}, &(0x7f0000000080)=0xb0) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000000c0)={r3, 0x2}, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) r5 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r5, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r6 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x2c) sendfile(r4, r6, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x3) 19:59:44 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x40002) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) read(r0, 0x0, 0x7) 19:59:44 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)=0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000080)={{{@in=@rand_addr=0x64010102, @in=@local, 0x4e23, 0x7ff, 0x4e24, 0x0, 0x0, 0x0, 0x20, 0x2b, 0x0, r1}, {0x7, 0x3ff, 0x0, 0x8, 0x20, 0x8, 0xff, 0x6}, {0xe, 0x3f, 0x0, 0x4}, 0x3, 0x101, 0x1, 0x0, 0x2, 0x3}, {{@in=@remote, 0x4d4, 0x3c}, 0xa, @in6=@loopback, 0x3505, 0x4, 0x2, 0xb5, 0x4, 0x3ff, 0x1}}, 0xe8) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ocfs2_control\x00', 0x18001, 0x0) setsockopt$SO_J1939_SEND_PRIO(r2, 0x6b, 0x3, &(0x7f00000001c0)=0x3, 0x4) ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f0000000200)={{0x100000, 0x2000, 0xa, 0xdc, 0x8, 0x5, 0x7f, 0x1, 0x7, 0x7f, 0x8, 0x9}, {0x0, 0x1000, 0x3, 0x24, 0x1, 0x71, 0xfa, 0x2, 0x0, 0x3, 0x9, 0x4}, {0xd000, 0x1000, 0x9, 0x6, 0x7f, 0xff, 0x2, 0x1, 0x7f, 0x7, 0xab, 0x4}, {0x4000, 0x3000, 0xa, 0x20, 0x8, 0x3, 0x0, 0x1f, 0xa8, 0x1, 0x8, 0x4}, {0x6000, 0x3000, 0xc, 0x0, 0x5, 0x1f, 0x1, 0x80, 0x3, 0x3f, 0x0, 0x6}, {0x100000, 0x10000, 0xd, 0x80, 0x20, 0x4, 0xd1, 0x6, 0x0, 0x2, 0x6, 0x7f}, {0x0, 0xd000, 0xf, 0x2, 0x7, 0x5, 0x3, 0x3, 0x3, 0x8, 0x3, 0x7f}, {0x10000, 0x2, 0xe, 0x8, 0x1, 0xdb, 0x8, 0x6, 0x81, 0x0, 0x4c, 0x3}, {0x5000}, {0x1000, 0x200}, 0x60050030, 0x0, 0x3000, 0x80, 0xa, 0x400, 0xd000, [0x80000000, 0x100000000, 0x9, 0x9]}) r3 = accept4$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000380)=0x14, 0x80000) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f00000003c0)={0x0, 0xe45, 0x3}) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000007c0)={0x0, 0x6, 0x8001, 0x3, 0x7ff, 0x2}, &(0x7f0000000800)=0x14) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0x40a85321, &(0x7f0000000840)={{0x3f, 0x40}, 'port0\x00', 0x0, 0x80000, 0x0, 0x1, 0x4, 0x37d, 0x0, 0x0, 0xa, 0x5}) r5 = signalfd(r3, &(0x7f0000000900)={[0xfffffffffffffff9]}, 0x8) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f00000009c0)={'syztnl0\x00', &(0x7f0000000940)={'ip6_vti0\x00', r4, 0x6, 0x26, 0x4, 0x401, 0x6e, @loopback, @remote, 0x20, 0x8, 0x0, 0x3c2b}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r5, 0x89fb, &(0x7f0000000a80)={'ip6tnl0\x00', &(0x7f0000000a00)={'syztnl2\x00', r6, 0x29, 0x9, 0x2, 0x6, 0x42, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2={0xfc, 0x2, [], 0x1}, 0x7800, 0x7, 0x1, 0x7ff}}) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, &(0x7f0000000ac0), &(0x7f0000000b00)=0x4) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000b40)={0xffff, 0xfffffff7, 0x1, 0xcccccccc}) r7 = getpid() tkill(r7, 0x29) r8 = syz_open_dev$audion(&(0x7f0000000b80)='/dev/audio#\x00', 0x8, 0x50001) ioctl$PIO_FONTRESET(r8, 0x4b6d, 0x0) 19:59:44 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x4100, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x168102, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) close_range(r2, r0, 0x2) sendfile(r0, r2, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) [ 806.911783][T26247] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 19:59:45 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r1, 0x0, 0x30000c) r2 = getpid() sched_setscheduler(r2, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x0, 0x0) r4 = fcntl$getown(0xffffffffffffffff, 0x9) wait4(r4, 0x0, 0x1000000, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) 19:59:45 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000040)={0x1, 0x0, 0x3000000}) 19:59:45 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x40002) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) read(r0, 0x0, 0x11) 19:59:45 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_score\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x10428, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$fuse(0x20000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') semop(0x0, &(0x7f0000000100), 0x2d) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x3c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000064}, 0x20008000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x54, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}]}, 0x54}}, 0x0) r2 = syz_io_uring_complete(0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0xb0, 0x453, 0x8, 0x70bd27, 0x25dfdbfe, "7c5a55044f2606bceb473e83acac2d5139fdbdfd0c413fc29e362be575274b9f0f15145e8916775616b1ae2accdb8e3c2acc274ec259c46f118cd9f8bf974552ad039e0154b50a83043fc092c459efdc85c41bd26748c7a947aa0832ee7a8d187aa744b3c33fdb7d7f39345675a705e84c2f5d5e042cea06a232eeac15b139515dfddb38dfee70b1e009b518e2f6fe3a972e75f8378163a794b60bdab8", ["", ""]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000004}, 0x800) semctl$IPC_RMID(0x0, 0x0, 0x10) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYRES64], 0x1}}, 0x0) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$FS_IOC_SETVERSION(r3, 0xc0c0583b, &(0x7f0000000080)) 19:59:45 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x187a51, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {0x0, 0x2}, @connect}], 0x1c) write(0xffffffffffffffff, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) bind$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x4e20, 0xee546aaf, @loopback}, 0x1c) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/xfrm_stat\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600)='nl80211\x00') sendmsg$NL80211_CMD_SET_WOWLAN(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001dc0)={0x30, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x2}}}}}, 0x30}}, 0x0) sendmsg$NL80211_CMD_SET_WDS_PEER(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x70, r5, 0x2, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @random="48988b70dafd"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x4008080) sendfile(r0, r2, 0x0, 0x80001d00c0d0) r6 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x0, 0x8280) getsockopt$inet_sctp_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f0000000100), &(0x7f0000000180)=0x8) creat(&(0x7f0000000040)='./bus\x00', 0x0) 19:59:45 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, 0x0, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) [ 807.571742][T26318] IPVS: ftp: loaded support on port[0] = 21 19:59:46 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000180)="02d68fa09c74f538fa8a554b7b4ae470c085c1cf7f5c2c09e8b3cd58cb3242c4927f9f67049c3361ddf867c86ff26aa32711cce9d26f6b8095bd69241cb4e812dcee1a0019ff98ede58fbe7f1775673d24ff56ca8c2d1bea2a9b887779a9abd94cc18121d283e82f4e665efbc2fcd0cd40", 0x71) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x82) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x3, 0x4, 0x0, @time, {}, {}, @addr={0x7, 0x7f}}], 0x1c) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x3) sendfile(r0, r2, 0x0, 0x80001d00c0d0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x20000, 0x0) r4 = dup2(0xffffffffffffffff, r3) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x181201, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r4) creat(&(0x7f0000000040)='./bus\x00', 0x0) 19:59:46 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x311691a8fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f0000000180)=@newqdisc={0x27c, 0x24, 0x300, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xd, 0x4}, {0x0, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x238, 0x2, [@TCA_RED_FLAGS={0xc, 0x4, {0x8, 0xf}}, @TCA_RED_FLAGS={0xc, 0x4, {0x7, 0xf}}, @TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_FLAGS={0xc, 0x4, {0xf, 0xf}}, @TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_MAX_P={0x8, 0x3, 0x1}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}, @TCA_EGRESS_BLOCK={0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x591}]}, 0x27c}, 0x1, 0x0, 0x0, 0x10}, 0x10) r2 = gettid() rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000000)={0x0, 0x3938700}, 0x8) openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x201800, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x30000c) wait4(0x0, 0x0, 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) 19:59:46 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) read$char_usb(r1, &(0x7f0000000040)=""/129, 0x81) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1, 0x84383) 19:59:46 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x40002) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) read(r0, 0x0, 0x12) 19:59:46 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000180)='./bus\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r2 = getpid() sched_setscheduler(r2, 0x0, 0x0) sched_getparam(r2, &(0x7f00000000c0)) r3 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r0, r3, 0x0, 0xae72) lgetxattr(&(0x7f0000000100)='./bus\x00', &(0x7f00000001c0)=@random={'security.', './cgroup.net/syz1\x00'}, &(0x7f0000000240)=""/154, 0x9a) creat(&(0x7f0000000040)='./bus\x00', 0x0) 19:59:46 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x40002) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) read(r0, 0x0, 0x700) 19:59:46 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000400)={{}, {0x1, 0x1}, [{0x2, 0x2, 0xee00}, {0x2, 0x6}, {0x2, 0x1, 0xee00}, {0x2, 0x2, 0xee00}, {0x2, 0x1}, {0x2, 0x4, 0xee01}, {0x2, 0x2}], {}, [{0x8, 0x2}, {0x8, 0x0, 0xee00}, {0x8, 0x4}, {0x8, 0x7, 0xffffffffffffffff}, {0x8, 0x1}, {0x8, 0x1}, {0x8, 0x1}], {0x10, 0x4}, {0x20, 0x56e62efa3f744597}}, 0x94, 0x0) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket(0x10, 0x0, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000140), 0x4) close(r0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r2, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time={0x80000000, 0x6}, {}, {}, @raw8={"a9a7ede490c4573f2623c899"}}], 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000100)) open_tree(r4, &(0x7f0000000180)='./bus\x00', 0x80000) r5 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r0, r5, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) [ 808.427354][T26318] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 19:59:47 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000040)={0x1, 0x0, 0x4000000}) 19:59:47 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000000)={0x80, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x5f, 0x33, @beacon={@with_ht={{{}, {}, @device_b, @device_b}}, 0x0, @random, 0x0, @val, @void, @void, @val={0x4, 0x6}, @void, @void, @val={0x25, 0x3}, @void, @void, @val={0x2d, 0x1a}, @void, @void, @val={0x76, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x80}}, 0x0) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x70, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="8c8653456bbb"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x70}, 0x1, 0x0, 0x0, 0x81}, 0x80) r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) r5 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r5, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r6 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r4, r6, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 19:59:47 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, 0x0, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:59:47 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000380)=0xffffffffffffffe1) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x14c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa, 0x1, 'choke\x00'}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0xfedc}}, @TCA_CHOKE_STAB={0x104, 0x2, "d281d9a44aba4acb0fd87204337b6d59f0d139d9a8902c43d0eb08839d3ff99a6980748d156eff874bc0a3d43a9b34da50cc384786b23380f867ab0421dc9000d4de020ea4c5014aa89d4d1f94d1839788245742c31e06a5772ed48d4675d08ff69bbf06cd176a9b185bb513a90f2642c55844cb5d87fd5beff1587657ac3dabbd80c0b56277dac5ef02cfa240e05f685e5db7701f99f473701ba0cba5e62685f1816cd80eb7329be763f1d52066bcc019174d63f0ae1c733bdd6999282156e3c97257c039a5f9d70ffc27419053b2aa1970df199451a3e3d2a22b030a3121be59d102e3ce14171becd72e93dba4881f92f744dfcdee598a61014d8fea3ff66d"}]}}]}, 0x14c}}, 0x0) r4 = socket(0x10, 0x0, 0x0) write(r4, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) sendmsg$IPSET_CMD_RENAME(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x58, 0x5, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="20f9ffff30000d040000006ccb00000010050000", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080)) 19:59:47 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) r2 = getpid() sched_setscheduler(r2, 0x0, 0x0) ptrace$getregs(0xc, r2, 0x6, &(0x7f0000000080)=""/131) ptrace$setopts(0x4206, r1, 0x0, 0x30000c) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) 19:59:47 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x40002) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) read(r0, 0x0, 0x1100) [ 809.575460][ T35] kauditd_printk_skb: 18 callbacks suppressed [ 809.575477][ T35] audit: type=1800 audit(1608580787.928:442): pid=26386 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15695 res=0 errno=0 19:59:48 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x40002) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) read(r0, 0x0, 0x1200) [ 809.621390][T26387] IPVS: ftp: loaded support on port[0] = 21 [ 809.632781][T26398] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 19:59:48 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f0000000180)={r2, &(0x7f0000000100)=""/59}) r3 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r0, r3, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) [ 809.691071][ T35] audit: type=1326 audit(1608580787.978:443): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=26381 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460faa code=0x0 19:59:48 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = dup2(r0, r0) clock_nanosleep(0x0, 0x0, &(0x7f0000000080), 0x0) mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_START_NAN(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="100202000000fddbdf2447730000000c009900fc0f0000250000000800ef000c0000000500ee00050000000800ef00000000000500ee0008000000"], 0x40}}, 0x400c010) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000040), 0x4) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x3c}}, 0x0) [ 809.758629][ T35] audit: type=1800 audit(1608580787.998:444): pid=26386 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15695 res=0 errno=0 [ 809.795295][ T35] audit: type=1800 audit(1608580788.038:445): pid=26399 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15695 res=0 errno=0 [ 809.821964][ T35] audit: type=1800 audit(1608580788.038:446): pid=26396 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15695 res=0 errno=0 [ 810.090214][ T35] audit: type=1800 audit(1608580788.448:447): pid=26430 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15695 res=0 errno=0 [ 810.152378][ T35] audit: type=1800 audit(1608580788.478:448): pid=26430 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15695 res=0 errno=0 19:59:48 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = dup2(r0, r0) clock_nanosleep(0x0, 0x0, &(0x7f0000000080), 0x0) mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_START_NAN(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="100202000000fddbdf2447730000000c009900fc0f0000250000000800ef000c0000000500ee00050000000800ef00000000000500ee0008000000"], 0x40}}, 0x400c010) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000040), 0x4) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x3c}}, 0x0) 19:59:48 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x40002) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) read(r0, 0x0, 0x1000000) [ 810.427303][ T35] audit: type=1326 audit(1608580788.788:449): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=26381 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460faa code=0x0 19:59:48 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() rt_sigtimedwait(&(0x7f0000000040)={[0x40000000]}, 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r1, 0x0, 0x30000c) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) [ 810.863515][ T35] audit: type=1800 audit(1608580789.218:450): pid=26453 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15695 res=0 errno=0 [ 810.933145][ T35] audit: type=1800 audit(1608580789.268:451): pid=26453 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15695 res=0 errno=0 19:59:49 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000040)={0x1, 0x0, 0x5000000}) 19:59:49 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, 0x0, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:59:49 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r1, 0x0, 0x30000c) wait4(0x0, 0x0, 0x0, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x14080) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f00000000c0)={0x0, @reserved}) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) 19:59:49 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$CHAR_RAW_IOMIN(r2, 0x1278, &(0x7f00000000c0)) r3 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r3, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r4 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r0, r4, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 19:59:49 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = dup2(r0, r0) clock_nanosleep(0x0, 0x0, &(0x7f0000000080), 0x0) mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_START_NAN(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="100202000000fddbdf2447730000000c009900fc0f0000250000000800ef000c0000000500ee00050000000800ef00000000000500ee0008000000"], 0x40}}, 0x400c010) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000040), 0x4) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x3c}}, 0x0) 19:59:49 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x40002) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) read(r0, 0x0, 0x7000000) 19:59:49 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r1, 0x0, 0x30000c) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mq_timedsend(r3, &(0x7f0000000080)="635b67c7545c8976b9fab0ffc65e4ff386c962924272a565c4ee08f042c0e3645c1c51b717878ffff678d87945f92fa9e418a6e8b78ad6b1d6144df4d173cbf0b1fe9074f9b4fdaf2dd5603095c10745e24302ed02bf59123c861a22f08e95b872b155f7b2986583b92800deafc54510fdb3cdafd3601a3602a40cad341ec801c586cbf7", 0x84, 0x3, &(0x7f0000000140)) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) [ 811.379818][T26465] IPVS: ftp: loaded support on port[0] = 21 19:59:50 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x40002) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) read(r0, 0x0, 0x11000000) 19:59:50 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x8001, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f00000000c0)={'TPROXY\x00'}, &(0x7f0000000100)=0x1e) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000080)=0x5) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c00000008a31baa8306010200000000000000000000ffff00000000000000001dc14ae1493213d92b4445fad613130a94191b4062f13639d77a6ab3afcfbab50413a52c51c9afe071bf25fcaddcc09483d68be785aa7b662f1c78f80765f13d019570ca1148e8d567d79e3a519d03576ca3cc4b4de61634504bb86a6bffe1251a53e4e92d59f5169aac67f65965714ae3d2c55e4214477329dc6ce0578a2dae37462c0e1a4fa08cd8496016106de6379692ab0ece"], 0x1c}}, 0x20000880) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000040)={0x0, 0x800000000000, 0x3}) 19:59:50 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r1, 0x0, 0x30000c) ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f0000000080)) r2 = getpid() sched_setscheduler(r2, 0x0, 0x0) wait4(r2, 0x0, 0x4, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) 19:59:50 executing program 1: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x42) write$P9_RXATTRCREATE(r0, &(0x7f00000001c0)={0x7}, 0x7) r1 = socket(0x10, 0x0, 0x0) clone3(&(0x7f00000003c0)={0x200000, &(0x7f0000000000)=0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140), {0x3c}, &(0x7f0000000200)=""/4, 0x4, &(0x7f00000002c0)=""/197, &(0x7f0000000240)=[0xffffffffffffffff, 0x0, 0x0], 0x3, {r0}}, 0x58) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/net/pfkey\x00', 0x100, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r2, 0x5000943a, &(0x7f0000000500)={{r3}, 0x0, 0xe, @inherit={0x58, &(0x7f0000001600)=ANY=[@ANYBLOB="00006000000000000200000006001f000000000007000000000000000000000000000000080000000000000808b84bde7fd300fa46bea89400000000000009000019a699277a1762f5b8a1ddabedfe7200000000007903000000000000"]}, @subvolid=0x7}) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000001580), &(0x7f00000015c0)=0x8) r4 = ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r4, 0x4004f50d, &(0x7f0000001500)) write(r1, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) lseek(r1, 0x6, 0x0) pipe(&(0x7f0000000180)) pipe(&(0x7f0000000040)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) open(&(0x7f0000001540)='./file0\x00', 0x40, 0x4) pselect6(0x40, &(0x7f00000000c0)={0x8}, 0x0, 0x0, 0x0, 0x0) 19:59:50 executing program 4: write(0xffffffffffffffff, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="280100001600000326bd7000f5ae4778ca3e23cf0ff5ffdbdf257f000001000000000000000000000000e00000020000000000000000000000004e2007ff4e22", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000004d5ff000000ffffffff00000000000000000000000005000000000000000700000000000000000000000000000000000000000000101f00000000000000ffffff7f000000007f00000000000000810000000000000000000004000000000800000000000000d1f82b18000000000700000000000000ffffffff090000007f0000002dbd7000073500000a000205400000000000000002000000010100000a0010000000000000000000240009000000000000000000ff0300000000000009000000000000000500000000000000"], 0x128}}, 0x400000c0) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dlm_plock\x00', 0x80000, 0x0) read$rfkill(r1, &(0x7f0000000340), 0x8) clone(0x4000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0x10) get_robust_list(r2, &(0x7f0000000440)=&(0x7f0000000400)={&(0x7f00000003c0)={&(0x7f0000000380)}}, &(0x7f0000000480)=0x18) rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r2, 0x8, 0x14) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) r3 = socket(0x10, 0x0, 0x0) write(r3, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000004c0)={0x0, 0x8, 0x5678, 0x3, 0x2, 0x95}, &(0x7f0000000500)=0x14) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000540)={0x0, 0x6, 0x3, 0x0, 0x3b73, 0x1, 0x2, 0x4, {r4, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1b}}}, 0x8001, 0xa0000, 0x9, 0x8, 0x6}}, &(0x7f0000000600)=0xb0) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) 19:59:50 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000040)={0x1, 0x0, 0x6000000}) [ 812.406806][T26465] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 19:59:50 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000380)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:59:50 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick=0xff, {}, {}, @connect={{0x3}}}], 0x1c) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 19:59:50 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x40002) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) read(r0, 0x0, 0x12000000) 19:59:50 executing program 1: r0 = perf_event_open(&(0x7f0000000700)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffff}, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x54) setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f00000004c0)=0x4, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) chdir(&(0x7f0000000240)='./file0\x00') r1 = socket$kcm(0x10, 0x3, 0x0) lsetxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="ca2d85bfa86bac2b0167f8da5a92f1cd9ff418943d68a02d4c8667d20e740d055d8ce67d307ab87b0380e48229fccc0f3353b75b7b70a345b9976cac4e34fec99a3ffa259a1991d4c3a3767f3af79b88a13b66d8433ef5bba88c008101bc23015314ebf0c113cf6d48365f85df29050323cb265b7dca638625ac7d495b267bb5f114e7877050e41e3bdd66fa0fc6d72b0eb7bad56f7c6ec7ab3fb00d6b522986eaccd544fc0da88cf8db4810cce093ee"], &(0x7f0000000480)='/dev/vcsa\x00', 0xa, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0xfc, 0xe3, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000000), 0x5, 0x0, 0x0, &(0x7f0000000100), 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000300)={0x0, 0x3, 0x4, 0x2, 0x124, {0x0, 0x2710}, {0x3, 0x2, 0x2, 0x1, 0x52, 0x1f, "0f6a97fa"}, 0x400, 0x1, @fd, 0x9, 0x0, r5}) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ubi_ctrl\x00', 0x40, 0x0) bind$isdn(r6, &(0x7f0000000280)={0x22, 0x2, 0x28, 0x20, 0xfe}, 0x6) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x6000000, &(0x7f0000000040)=[{&(0x7f00000002c0)="2500000010008108040f80ecdb4cb92e0a4804000d00000009020e00010040d5ae7d0200ff", 0x25}], 0x1, 0x0, 0x0, 0xe}, 0x0) 19:59:50 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000040)={0x1, 0x0, 0x7000000}) [ 812.704144][T26539] bridge0: port 2(bridge_slave_1) entered disabled state [ 812.711859][T26539] bridge0: port 1(bridge_slave_0) entered disabled state [ 812.781932][T26545] IPVS: ftp: loaded support on port[0] = 21 [ 812.827451][T26539] device bridge0 entered promiscuous mode 19:59:51 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440)='nl80211\x00') sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x20, r1, 0x8, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x4d}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40880}, 0x4000000) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) r4 = socket(0x10, 0x0, 0x0) write(r4, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) sendmsg$IPCTNL_MSG_EXP_DELETE(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x170}, 0x1, 0x0, 0x0, 0x40000}, 0x20000005) write$sndseq(r3, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) syz_open_dev$vcsn(&(0x7f00000001c0)='/dev/vcs#\x00', 0xa5, 0x1) r5 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r2, r5, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 19:59:51 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x40002) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) read(r0, 0x0, 0x7ffffffff000) 19:59:51 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3142a02f7e, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r1, 0x0, 0x30000c) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) [ 813.185259][T26550] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.1'. [ 813.200110][T26560] IPVS: ftp: loaded support on port[0] = 21 [ 813.218276][T26550] bridge0: port 2(bridge_slave_1) entered blocking state [ 813.225604][T26550] bridge0: port 2(bridge_slave_1) entered forwarding state [ 813.235139][T26550] bridge0: port 1(bridge_slave_0) entered blocking state [ 813.242346][T26550] bridge0: port 1(bridge_slave_0) entered forwarding state 19:59:51 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={&(0x7f0000000180)="b9fc56f3510653a6b489913da9860f8c757625715a2b00474c40a1229a9aae50ac1b28bd89f0c61b6db06fe18a6a5c92f81c4f2cfcb65c57f0423ca2e16174a4e88cebebe04dff448e15fc846a9a80e7317baa0b29f562990146d25a44846b116a450c09be9f82bb03cc", &(0x7f0000000280)=""/5, &(0x7f00000002c0)="ed3512cf50e888f8cdfcb8fb66c5f1b5843db3296996c84b8acaaf0bb20592650ef33655680b5ced46a21e34fb91767187352ace0c800e8ac45a40ea5757d06b777b06e5401f5123fd77c598a65097ec05100dc77b914c27d60903cabcc51697bd9e790f8d2c07ec49997dccddaead070550164a50", &(0x7f0000000340)="70c1ccc825016d4da5981356bf1ed24defbb85ce9ca84222b90d3356d6bc7d914975b53a0559431a8955d7cb9332f815027cf41b79045c30e93043ef5c00cd5e9fa595da65896bb7f76a4f11386590e1dc59fd6695b4d0f4138ff5e8f6d6a954675f7668680f3b64d783a8ca1f658f7834eec99a32f335b06390afb812", 0x45c, 0x1}, 0x38) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) move_mount(0xffffffffffffff9c, &(0x7f00000000c0)='./bus/file0\x00', r1, &(0x7f0000000100)='./bus\x00', 0x62) creat(&(0x7f0000000040)='./bus\x00', 0x0) 19:59:51 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x40002) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) read(r0, 0x0, 0xf0ffffff7f0000) [ 813.424600][T26546] bridge0: port 2(bridge_slave_1) entered disabled state [ 813.431999][T26546] bridge0: port 1(bridge_slave_0) entered disabled state 19:59:52 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x40002) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) read(r0, 0x0, 0x100000000000000) 19:59:52 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x280, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./file0\x00', 0x12) [ 813.979800][T26565] IPVS: ftp: loaded support on port[0] = 21 [ 814.253953][T26549] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 815.147795][ T35] kauditd_printk_skb: 27 callbacks suppressed [ 815.147813][ T35] audit: type=1800 audit(1608580793.508:479): pid=26628 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15695 res=0 errno=0 [ 815.237567][ T35] audit: type=1800 audit(1608580793.538:480): pid=26668 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15695 res=0 errno=0 19:59:56 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000380)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:59:56 executing program 1: pidfd_open(0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x3c, 0x1, 0x4, 0x801, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_QTHRESH={0x8}, @NFULA_CFG_TIMEOUT={0x8}, @NFULA_CFG_NLBUFSIZ={0x8}]}, 0x3c}}, 0x0) 19:59:56 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x40002) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) read(r0, 0x0, 0x700000000000000) 19:59:56 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) r2 = socket(0x10, 0x0, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) getsockopt$inet6_buf(r2, 0x29, 0x0, &(0x7f0000000500)=""/4096, &(0x7f00000000c0)=0x1000) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r3 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r0, r3, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 19:59:56 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000040)={0x1, 0x0, 0x8000000}) [ 818.247277][ T35] audit: type=1800 audit(1608580796.608:481): pid=26677 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15695 res=0 errno=0 19:59:56 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5ac, 0x8243, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, &(0x7f0000001700)=ANY=[@ANYBLOB="36943a"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000080)={0x30}) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0)='/dev/usb/hiddev#\x00', 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000500)={0x1, ':'}) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x102, @string={0x102, 0x3, "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"}}, 0x0, 0x0}, 0x0) [ 818.333103][ T35] audit: type=1800 audit(1608580796.638:482): pid=26677 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15695 res=0 errno=0 [ 818.347017][T26683] IPVS: ftp: loaded support on port[0] = 21 19:59:56 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x40002) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) read(r0, 0x0, 0x1100000000000000) 19:59:57 executing program 4: r0 = gettid() r1 = socket$inet6(0xa, 0x8000080003, 0x800000000000005) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@bridge_setlink={0x34, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x0, [{0x8}]}}]}]}, 0x34}}, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r4, 0x0, 0x30000c) r5 = socket(0x10, 0x0, 0x0) write(r5, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/27, 0x1b) getsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@dev}, &(0x7f00000000c0)=0x14) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x20000880) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x16004, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r6, 0x5000943a, &(0x7f0000000380)={{r7}, 0x0, 0x18, @inherit={0x58, &(0x7f0000000180)={0x0, 0x2, 0x8, 0xffffffff, {0x3, 0x6, 0x5, 0x7, 0x3}, [0x9, 0x9]}}, @name="89eb75c14709216d7247d8307fa95fce604b241bfb325080c1f26267df22a4abadf650a3cee8d5c928572d8492940223c8c9733a84f8679039348354e2f5f7bbc7ed9e57bd9a77fc1eb3ec91518d346b013ce97dc667b92c104b6d767ed36c352202baa0eaaa4244a19cc69374d72c4e563483c32decd96099eef9e5bfddaf5d2995a9776e84fbfaba18ca9ada0dae4b679865b35e28bbd42e81503d1d54e3ac23fd7912638dfbcba4b2fe0d19acf12de1b82370f284720c9a2adea92897f72017e95896d21b3bbf62862922629bb410f0a476e6a5acc07bead7b63b8fc87a357b10e1d09d7b94bf05d86b36bec2ca04be9f42a6db03f44dbe6fa070efd52de6e9c7d7fdefabc6a330e4e71d4ff53587a5635291ee39be84ba66ba05ea1f275657a3ea7c5600f6137369cdcf5b5b20692d28a9c92fc75193e3b9861d06f9c12207d15523e891d12c5fceffb7a71a36767e080e4e035e6dc837a17ce5c5bf5e0d3e17ac523faa0d8a5645db4e4b6e571c8f447951ea5f7a5ab574d97e0d4ff7c0e8a7a964ef0f89ab08cc266bf3dcb0375f01575b7d5c27d3d772b1d591a9cd023dd4965f58b5ad2124d9dbd31212d6d7c4df8f8780553f430e26b94c184e98dbe94732d6a6d2749941c9b8d631aec97add73f86a7701063ff6ad5f60d8251e5e354697f3043925c775fce5ff8c6faf7cede014d8cde417e1bb93fe8f27e81e2a5d86e7ac6649ab95e19f7949971a0f7e2e4b00089fab2098f21d40fd52da18c9198c7d1d67cf3e980b3dedfdae008afce775cb2f52041fa11c4429a4f7dbcc2937118c97fb1ba23d7409497f99862b8a005b09b640bbc7271c43c718365abebf62f3c9555724cce00f0fd2fc8e248ebf586333a8858f2acf7db9acbb71f0190513e0e74739bf28a3b1e3f96c130f72c0895ce22d5d56a0c3e08c200961eb977825fe5915f6f4594687c3030263c614ce3f27515dc611e2be6c914f59a67e47f8da7f807931c39ae1e0d4ba2e23459def106d0b60c37f320d883aaf77b4e00bf31086eb67ef73fbc158c0473a6e867185f69af9f51bc00e5448c6390254701bd37a67f27865c9b0bb93baa1173b181600e281f7d931d95645bfc049a2e08f3b276886e1d323db6b821f1c40a39807eb096e907222c9274a286fc2787dc52935060dc84669abe6c32479877ae767c2e08ac979b7689af06961ad15793854c66d1452d758f862065ff70b0361170e6ce26423b584b88f16a98646ca15bd1cb67be66242e089a87ba39e394b880717915a472dbca9170f8a530c5d3801ff65d4327a91de80cabf2f820092e044c72397611580334c5c7364bd91e804a9c8c2c1d353e6eb799107d39c390347df9bc7fe9bd73c53d06ad8ac1e5056ba53c77d1b068696b9d2fb6f4d2b3bd9aea6a25364186af568e268c31746d2330996d9e33b89af5a8df951abc9e1322e249a4b152a47e0b209ee73cea50cbee14d06ba66d3f4004814589daca572970f77967a50a90a199a61f159d52a1a612f7e7c18c9b765204f0683775cefeec02554c104ec75a623e622a1134dc2c87fb87816a2d086ec3d11b0261db245854a00265e115364449c5f53e0f8a4839f52154c00b4f22636fbf0a0d3eb87cdaeb5c434c7c4bda7b2625b2e71338ec71cbfe262f080e2e4bb9158ba54a532b2c8c715a6b79a86905e33d59b95c08686569e445af87a22e257c4094989a3813f44cda0ba0038ed50812bb61a94ff2032a219f2af03508be103aeb7249b092a0150d0334f2666d7f0db8fe279e72f520f100bc8fab7078deadc3d684e7dd85c1d5dce96370cf99ff809c8d6abeabf638e874dc37e7d41ca5d22215f338220366886ec939b7b2a0004c2046d53741b1ddeb3fbd2bfee4a5b5b9d1aa085c8e1ccd1eb732277b9eb9f3a3c5cbb49fc9e376a4337865e5616750848208ad89a06dcfe7e5b395a9052bbe787cfbf098957f7088b450b49c93ea08f8bad23412604d40f05be6e55ef99bbdd30a48b63c39c13d2f61d783cb18dedf3adc02ba2971c1a52ec96475d495742c26e840b1022ee959b1375dc8fdf0c60f3a4b10b2e94f8c7e67e61a2a57106e705467a798d0218b92bc68b97b6771dee6937e36e97a43c7ac4d0db647bb71ae1e628306b613baa947e0dad08344e8b3a096b6d6e6244a65ed50fa3ec0cc2db9fef005c70b5aaf03c1aae45d23f00cebb724cf0b4503cf29300c78a95a219454065345f752f9e5bcd55b9dca6e663f946068a59be404fe468481a8da9786241af73c6928282ed8cf813a41f7cb8519d2728e996e9b59ba767189c715c21a96c40bce9fb29794b68abe9bc60a84014f625afe7cfe417a635fd69a09bbca1c319e8aaa8250e159afc2eef71353deb6eb85021fe7faa0eda1f8c02921b713a419e02941693e2ccb6e5dfe2d1a50e5e0019de2f008035312dd4341ae6139c3aa03270a5900404eb27387b663993aea25a632d1d00371b4d7989e668e08abf5f7b34c4a0cc9311dfca32049683b33d55fb9afe9d7780eabf066d5c5c452354bfced41c993d40080322cb2db57453fde487e4bdf6b40aa6fa582c3080e74f00d378ee1f3c9e030a484f5d253619ba3a99f3a5264313ec831039c95d1d25ec2bcc4d3ae921956cd3a56fa1f37954e3876180f02c8bb12fe0005b4aa956e13b5788b2f09630f1c042d475fe36ee665ff0da6273c963de482eac9a82d132d650fb246a14fae8b455225932c314b065725aabec1f7585c448abd6f667cd196293adf6d70ef38c7db9c8a6ad1289cf3a197ac850b6a64bb4a16c7cd393e35d3d0bff9eb0bb0065febf89be8824dcc060f15d657940c2fb53b3462beffc478025a7e99d3b15405ec18c9adee98d5cdd8559c771ed69287160f735a9fce484f02dca1087ad3e5d6d2182910dae9c096fd222b334cc2fc8c04a486f9dfceab1ab1716f96eeb6ee904702e97a8131257f60c7f0677f06658571f0c9aae85c922f5117e36f1b3d58b4e747f4dbfbacd476bcb2d217a588844548f04ce174cce76031d40ef493d1fe02de822e58bf19865589bb37b58576d63e221a6107fc608fefe79fc02091fa2d9fec25478cd0867d78a0f7d365f1db01b85427295723d9b0c2f3d0febbded9b923c1847cb9962ef7a7239de4cfe94fe37dd23676f634e142a2641963a243590738f46de1bb7e47f7ca0bde64b1395d66be835e3d730f4868e7d5b1d93207f61eb6b2161c9e1271debb8b6629357568b373edd6c9b74fe768feef9f793090ff0fd3f0543c3ec8edcc756963b2810a08b6d5dee57b3bee1e2b7ef826e5d53663cd559c54f3497d57750ea3fc5b853d2198bea3b8c7b1132fa7b3881cbdf81acb40724ea31ec65e08960a6a94fd3318bb27203cf5f3e542d162a8d8e20edf04f742181959808f1e37984ea561a25762efa1694378e1c3eb721194da89c86f34677a901e62bee60ddeb3f18b9b395f5af46e6edeb4664b2966585fd773b49839907d2b1f11518051330156012c4706cad1a27446cf84827e40c455bad9067feee2a2f289e653ce4628503918531709c98fef452d8758bb53ab6b153f0b90ab62890be203d583c09f40936f4efb6c88040f5e6b0b3cc38bf48f5374e4c63596a664a18b5f8a61348868845c90774c0e3bfb53bb1e072bf967f7139046195dad9cca1f16c1d77153ce3bea317e1dfd4d6942937280c0b7a23931cf776922863f46913774d77d56b659e8ed70091483dcdead426681b1fdae94a65798d71b9d6806fe81f9485606cedf03686fcaf4154ba2018356cc9053504db94259b004f8910e518ff87c2cf372f510e1825ccae1376599ecec90d80d9732affe15097efa549ca3b955a6c39051e7fddd1512b98b5a20bdd5c61b5c02d64d4893332a0010ead8c8d480f66518439bf4964e10e28e8be6c520d50ceaee502ed61837c8e883b903f71fdb6a65142931d1140c0d02618276743150193d3ca79a500387403db74b61bd232fef77f659baec267712d9861ed689d283b1d670a615db1ae87604298f57433458290fc29a416fc11f6ebada96faf3789264ff4a70ac3723bff34740054387f945989d5eca1417fd5aed82580ba7fa05155b9134a69db2e7dd1f824514cbde7132cabdf0b69c511bb0fc999ca770cdd460deb391f4ed0a726096b0d95bbf6f571fabcfd9d0a7b2c7f6560b8a25c2a70023a133de16a29cc469af1ac30c02b60c2b8faf9e6bafc8ba58aa06b2131fb3d3e65baab8d3235a96a6071188904162d5ff2fabdb110de58738a4cc6783ca8a221809e838f3b5bd8960d7d951b2f351553f37bbd0fc2ee2c793c2f237debd6255ee8fd0a03d8f9a30eb8fb1aaab22e3af40616abd9ddaaba614b38744721d043179ef73fa749a7f31d14019497501897c6c6a1594c6de6604333b9d1df30f368851ef71bb2635ac74f02b0f563d2ff6e57c77e8cfe9c13f9662bb6fdf4404a1e2f4825c295349679ce21113190e70497554afccd5cd1f120f78545b8081102f999f49e6a768bdbfe161ca5a3739718fe4964850176030c73bf07e940e32ae42e1d7e063621312773a2128ec3ac0c6fa2be7a107fa27ff901cdd8e22e791a9452c9ded8d5e230207618164476ec90191ad1c4c527987e69bca61aa2c5d3a91d4b9a29f72fc28da504f374dad6d75e54a729e350d5b3e04a73fe63bb900b75ce04de6174553139c2d07d102cd56d48266b80cb21032983b5cbf43951b1bcb6908b9baac74410ad66deec024c4722d3af19527ef07b7966930cd42c3cea5303a226e89475865c39ce6adcd1bcf5611ea1f11f2b7039afcf759b881f28c81dcb16146feb9b4805a39c4c6d6a072ab310137c1d27c88b5d44f7feeafbba721ff9842cd372b1062eb9829fa858c8dead7c44487b2af1c80f8c87edf501ca4f1322cea22499592d0c39764872f37bea941ba97887a754f3d762b0fc217a380f7d2cacc1f7778d5ae87dad76d3c5fc347a3702a87e74bee33fa841db86e2b00feef86e6028bdfde57569268fc511273780c99e8e46562694393eb92569542d7d3201cf57e23d21313fddac910def0feb5037d690bcd95b5b102ec4685a1d7c4d06688664d03b77af355f2d202b6552dab6d2e4ef7d95687855ee06da6938c8c583ca76d199f00180b7d43f291952c1581a8919f61a645284484a6647a60cf53ae0384400d91c367312a97384538439d37b4c050a1b85967426b05dfd97a6de4e4b84532b1b15676fd404381412ec8f52c338904af274ccfd731519c6d36129a70ea1e5ca667346a32c6a54d6efa5f62d2112902669a32557c92033dd7428f06f2ade3ad9c1ad69e9286edc7e1d33acc8f682c4020bf344e92bda9ea5fc187d04457c309c9d1ddf346e1aa657f82c8524a606f7b7c5adbe74e982dce597ae510b6165f7bc0c4d8d48c660b15c37f718da89a1a38dd1f2bcc3b138de7a69f01d8906e5899f6f94af3d8b30a4dd7f9f9468de2082572896620f2d9f1bd33acd2b2584d31e7f1874c52a05faf2fa4e430f9f24d772a0b5eac6b56101483d8cd5e2cccde88df7578fb983be0b1ae358d2e1628306a4c5ccfa1f5ff6c77467bda535f58a0bd7a1b5e3caa6228c8e49ffe4ed0022fb9da6a90b91e0d668110d404fd7e256665e79df67fa28374180f69790578bc6b09204f6d6acf573a105dcf6176e14f83727ff1104ec2bfb666ca1477b52a3"}) wait4(0x0, 0x0, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x3) [ 818.784435][T23604] usb 2-1: new high-speed USB device number 13 using dummy_hcd 19:59:57 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x40002) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) read(r0, 0x0, 0x1200000000000000) 19:59:57 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000000c0)=0x7) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x9609, @ipv4={[], [], @multicast2}, 0x4}, 0x20) ptrace$setopts(0x4206, r1, 0x0, 0x30000c) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) [ 818.975338][ T35] audit: type=1326 audit(1608580797.338:483): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=26715 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460faa code=0x0 [ 819.080540][ T35] audit: type=1800 audit(1608580797.378:484): pid=26684 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15695 res=0 errno=0 19:59:57 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) r1 = getpid() sched_setscheduler(r1, 0x0, 0x0) ptrace$setopts(0x4200, r1, 0xbc, 0x30004e) socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1c) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) 19:59:57 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') sched_setscheduler(0xffffffffffffffff, 0x6, &(0x7f00000000c0)=0x8) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) [ 819.204691][T23604] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 819.246378][T23604] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 819.272430][ T35] audit: type=1326 audit(1608580797.628:485): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=26732 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460faa code=0x0 [ 819.334673][T23604] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 819.398040][T23604] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 819.418486][ T35] audit: type=1800 audit(1608580797.778:486): pid=26734 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15695 res=0 errno=0 [ 819.444781][T23604] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 819.473975][T23604] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.495125][T26683] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 819.511938][T23604] usb 2-1: config 0 descriptor?? [ 819.536367][ T35] audit: type=1800 audit(1608580797.808:487): pid=26734 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15695 res=0 errno=0 19:59:58 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000380)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 19:59:58 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() rt_sigtimedwait(&(0x7f0000000040)={[0x1]}, 0x0, &(0x7f0000000000), 0x8) ptrace$setopts(0x4206, r1, 0x0, 0x30000c) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) 19:59:58 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x40002) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000040)={0x9, 0xdc27}) read(r0, 0x0, 0x0) [ 819.989224][T26745] IPVS: ftp: loaded support on port[0] = 21 [ 820.008035][T23604] appleir 0003:05AC:8243.0004: unknown main item tag 0x0 [ 820.019222][ T35] audit: type=1326 audit(1608580798.378:488): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=26742 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460faa code=0x0 [ 820.065629][T23604] appleir 0003:05AC:8243.0004: No inputs registered, leaving [ 820.125569][T26746] usb usb7: usbfs: process 26746 (syz-executor.3) did not claim interface 9 before use [ 820.180778][T26746] usb usb7: usbfs: process 26746 (syz-executor.3) did not claim interface 9 before use [ 820.182165][ T35] audit: type=1800 audit(1608580798.538:489): pid=26736 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15695 res=0 errno=0 [ 820.260399][T23604] appleir 0003:05AC:8243.0004: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8243] on usb-dummy_hcd.1-1/input0 19:59:58 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) setsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f00000000c0)=0x1, 0x4) creat(&(0x7f0000000040)='./bus\x00', 0x0) [ 820.297399][ T35] audit: type=1800 audit(1608580798.598:490): pid=26736 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15695 res=0 errno=0 [ 820.478527][ T35] audit: type=1800 audit(1608580798.838:491): pid=26783 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15695 res=0 errno=0 [ 820.572804][ T35] audit: type=1800 audit(1608580798.868:492): pid=26783 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15695 res=0 errno=0 [ 820.662903][ T35] audit: type=1800 audit(1608580798.998:493): pid=26783 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15695 res=0 errno=0 [ 820.766322][ T35] audit: type=1800 audit(1608580798.998:494): pid=26786 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15695 res=0 errno=0 [ 820.840934][ T35] audit: type=1326 audit(1608580799.128:495): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=26742 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460faa code=0x0 [ 820.874726][T26745] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 19:59:59 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000040)={0x1, 0x0, 0xff000000}) [ 821.318317][T26397] usb 2-1: USB disconnect, device number 13 [ 822.104659][T23601] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 822.464700][T23601] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 822.481619][T23601] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 822.497314][T23601] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 822.510135][T23601] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 822.525959][T23601] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 822.537479][T23601] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.554047][T23601] usb 2-1: config 0 descriptor?? 20:00:01 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000380)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 20:00:01 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x40002) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x1f, 0x3, 0x12, 0x0, 0x0, 0x0, 0x0}) read(r0, 0x0, 0x0) 20:00:01 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick=0x6, {}, {}, @connect}], 0x1c) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, &(0x7f00000000c0)={0x3, "37fd8b"}, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r5, 0xc10c5541, &(0x7f0000000380)={0x7fffffff, 0x7153294}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000080601020000000000000000000000000500010007000000563099c96b8a5e2a07000000f58b9ed0af7cd803c7386897cb4511eddd4d9893cbbc66ec07e974665436a9bfed3af3256450c70ffd5c206b481c1c8e9c844cab196734d3216f7918e6dfdee3ae3eb40b21f043def9b5b1262fe163d19dfc0b39056996ac2ca128ae8e800154ebd48a3b3016a708ea2c3137edf88ab4f503879bedd045d4bd0176940e0da100170000000000000000000032e40e97fa35a0ba4ced37a12d5a75410bb85d254e2261fd287083"], 0x1c}}, 0x20000880) accept$alg(r3, 0x0, 0x0) recvfrom(r2, &(0x7f0000000280)=""/195, 0xc3, 0x10000, 0x0, 0x0) 20:00:01 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x8001]}, 0x8, 0x800) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0x18, 0x4, [0x7, 0x6, 0x8001, 0x10001, 0x6]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0x1c}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4002}, 0x8810) rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r1, 0x0, 0x30000c) r3 = syz_open_dev$vcsn(&(0x7f0000000200)='/dev/vcs#\x00', 0x1, 0x80) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, 0x1412, 0x404, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0xc0}, 0xc884) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) 20:00:01 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000380)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 20:00:01 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000040)={0x1, 0x0, 0x100000000000000}) [ 822.753080][ T35] audit: type=1800 audit(1608580801.108:496): pid=26828 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15695 res=0 errno=0 [ 822.784708][T23601] usbhid 2-1:0.0: can't add hid device: -71 [ 822.789597][T26826] IPVS: ftp: loaded support on port[0] = 21 20:00:01 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r1, 0x0, 0x30000c) r2 = getpid() sched_setscheduler(r2, 0x0, 0x0) wait4(r2, 0x0, 0x8, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcsa\x00', 0x101801, 0x0) ioctl$UI_BEGIN_FF_ERASE(r3, 0xc00c55ca, &(0x7f0000000240)={0x2, 0xffffffff, 0xf8}) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000100)='./file0\x00', r4, 0xee01) r5 = signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) ioctl$SNDCTL_SEQ_NRSYNTHS(r5, 0x8004510a, &(0x7f00000000c0)) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) [ 822.816870][T26834] IPVS: ftp: loaded support on port[0] = 21 [ 822.825210][T23601] usbhid: probe of 2-1:0.0 failed with error -71 [ 822.869832][T23601] usb 2-1: USB disconnect, device number 14 20:00:01 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x40002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x1, 0x2, 0x201, 0x300, 0x9}, 0x14}}, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x0, 0x10, 0x0, 0xa, 0x0, 0x0}) read(r0, 0x0, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x4402, 0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r3) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NL80211_CMD_RADAR_DETECT(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x20, 0x101, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000000) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0xfffe, 0x0, @private0}]}, &(0x7f0000000180)=0x10) r6 = dup3(r5, r4, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x17) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000580)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}}, &(0x7f0000000080)=0xb0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000080)={r7, 0x6, 0x30}, &(0x7f0000000100)=0xc) [ 822.912770][ T35] audit: type=1800 audit(1608580801.158:497): pid=26828 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15695 res=0 errno=0 20:00:01 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x65142, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1fee00) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x2) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r0, r2, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x40, 0x1401, 0x400, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x8004}, 0x40000000) 20:00:01 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) r1 = getpgid(r0) ptrace$setopts(0x4206, r1, 0x8, 0x34) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) [ 823.066053][ T35] audit: type=1800 audit(1608580801.238:498): pid=26839 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15695 res=0 errno=0 20:00:01 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x40002) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x101, 0x0, 0x0, 0x0, 0x0}) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x10000010401200) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x2000, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0x4000010, r2, 0x4c25f000) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000040)={0x2, 0x80008, "007c37f33614781293457bef20645041a8e97312f4cdcb6d", {0x4}, 0x61be}) read(r0, 0x0, 0x0) 20:00:01 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x3102002dfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x8) ptrace$setopts(0x4206, r1, 0x0, 0x30000c) wait4(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000080)={0x0, 0x84, 0x26}, &(0x7f00000000c0)={'enc=', 'raw', ' hash=', {'cmac(sm4)\x00'}}, &(0x7f0000000140)="a9bfc36b0b1effe1b5d24944f6ba194e5b5c0dc7cdced57c70e798487907bb1c132bd03fd0f981333bb5fdd7f54c956ba5f8d3a064db16a69a3e91b4672630b5437d0b1bd85833a6c11fbd9d8a072a3c1b49bb6698b1711b3c94617ea5e182e741c80367a62db180d98c962e2a45f1ee74cbf5ad52340343ce670f16bf042120fe611da8", &(0x7f0000000200)=""/38) [ 823.516744][T26900] ================================================================================ [ 823.527267][T26900] UBSAN: shift-out-of-bounds in drivers/usb/gadget/udc/dummy_hcd.c:2293:33 [ 823.536000][T26900] shift exponent 257 is too large for 32-bit type 'int' [ 823.543151][T26900] CPU: 0 PID: 26900 Comm: syz-executor.3 Not tainted 5.10.0-syzkaller #0 [ 823.552288][T26900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 823.562648][T26900] Call Trace: [ 823.566392][T26900] dump_stack+0x107/0x163 [ 823.571047][T26900] ubsan_epilogue+0xb/0x5a [ 823.576607][T26900] __ubsan_handle_shift_out_of_bounds.cold+0xb1/0x181 [ 823.583765][T26900] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 823.595852][T26900] dummy_hub_control.cold+0x1a/0xbc [ 823.601396][T26900] usb_hcd_submit_urb+0xcaa/0x22d0 [ 823.606795][T26900] ? dummy_bus_resume+0x260/0x260 [ 823.612504][T26900] ? usb_add_hcd+0x2c0/0x2c0 [ 823.617176][T26900] ? kasan_save_stack+0x32/0x40 [ 823.622461][T26900] ? kasan_save_stack+0x1b/0x40 [ 823.627646][T26900] ? __kasan_kmalloc.constprop.0+0xc2/0xd0 [ 823.634902][T26900] ? usb_alloc_urb+0x65/0xb0 [ 823.640951][T26900] ? usb_control_msg+0x1c9/0x4a0 [ 823.646660][T26900] ? do_proc_control+0x4cb/0x9c0 [ 823.651893][T26900] ? usbdev_ioctl+0x12c1/0x3b20 [ 823.657266][T26900] ? __x64_sys_ioctl+0x193/0x200 [ 823.663983][T26900] ? do_syscall_64+0x2d/0x70 [ 823.669142][T26900] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 823.676149][T26900] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 823.684673][T26900] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 823.691685][T26900] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 823.699114][T26900] usb_submit_urb+0x6e4/0x1560 [ 823.704763][T26900] ? lockdep_init_map_waits+0x250/0x720 [ 823.711013][T26900] usb_start_wait_urb+0x101/0x4c0 [ 823.716677][T26900] ? usb_api_blocking_completion+0xa0/0xa0 [ 823.723055][T26900] ? kasan_unpoison_shadow+0x33/0x40 [ 823.728531][T26900] ? memset+0x20/0x40 [ 823.732730][T26900] usb_control_msg+0x31c/0x4a0 [ 823.737725][T26900] ? usb_start_wait_urb+0x4c0/0x4c0 [ 823.743607][T26900] ? wait_for_completion_io+0x260/0x260 [ 823.750118][T26900] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 823.757147][T26900] ? snoop_urb+0x64/0x130 [ 823.762508][T26900] do_proc_control+0x4cb/0x9c0 [ 823.770263][T26900] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 823.778129][T26900] usbdev_ioctl+0x12c1/0x3b20 [ 823.784209][T26900] ? processcompl_compat+0x680/0x680 [ 823.790201][T26900] ? lockdep_hardirqs_on+0x79/0x100 [ 823.796320][T26900] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 823.802763][T26900] ? do_vfs_ioctl+0xfc3/0x1090 [ 823.809212][T26900] ? do_vfs_ioctl+0x89a/0x1090 [ 823.814530][T26900] ? do_vfs_ioctl+0x27d/0x1090 [ 823.820233][T26900] ? generic_block_fiemap+0x60/0x60 [ 823.827054][T26900] ? lock_downgrade+0x6d0/0x6d0 [ 823.832078][T26900] ? _copy_to_user+0xdc/0x150 [ 823.837346][T26900] ? __fget_files+0x2e3/0x430 [ 823.842564][T26900] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 823.849720][T26900] ? processcompl_compat+0x680/0x680 [ 823.855280][T26900] __x64_sys_ioctl+0x193/0x200 [ 823.860936][T26900] do_syscall_64+0x2d/0x70 [ 823.866417][T26900] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 823.873199][T26900] RIP: 0033:0x45e149 [ 823.877372][T26900] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 823.899384][T26900] RSP: 002b:00007f1a1c4b5c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 823.908801][T26900] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e149 [ 823.917149][T26900] RDX: 0000000020000000 RSI: 00000000c0185500 RDI: 0000000000000003 [ 823.926687][T26900] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 823.935163][T26900] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 823.943433][T26900] R13: 00000000016afb7f R14: 00007f1a1c4b69c0 R15: 000000000119bf8c [ 823.951561][T26900] ================================================================================ [ 823.961523][T26900] Kernel panic - not syncing: panic_on_warn set ... [ 823.968567][T26900] CPU: 0 PID: 26900 Comm: syz-executor.3 Not tainted 5.10.0-syzkaller #0 [ 823.977905][T26900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 823.988609][T26900] Call Trace: [ 823.991939][T26900] dump_stack+0x107/0x163 [ 823.996574][T26900] panic+0x343/0x77f [ 824.000761][T26900] ? __warn_printk+0xf3/0xf3 [ 824.005727][T26900] ? ubsan_epilogue+0x3e/0x5a [ 824.010540][T26900] ubsan_epilogue+0x54/0x5a [ 824.015182][T26900] __ubsan_handle_shift_out_of_bounds.cold+0xb1/0x181 [ 824.022365][T26900] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 824.027971][T26900] dummy_hub_control.cold+0x1a/0xbc [ 824.034000][T26900] usb_hcd_submit_urb+0xcaa/0x22d0 [ 824.039273][T26900] ? dummy_bus_resume+0x260/0x260 [ 824.044997][T26900] ? usb_add_hcd+0x2c0/0x2c0 [ 824.050143][T26900] ? kasan_save_stack+0x32/0x40 [ 824.055377][T26900] ? kasan_save_stack+0x1b/0x40 [ 824.062152][T26900] ? __kasan_kmalloc.constprop.0+0xc2/0xd0 [ 824.069179][T26900] ? usb_alloc_urb+0x65/0xb0 [ 824.074401][T26900] ? usb_control_msg+0x1c9/0x4a0 [ 824.079859][T26900] ? do_proc_control+0x4cb/0x9c0 [ 824.085211][T26900] ? usbdev_ioctl+0x12c1/0x3b20 [ 824.090714][T26900] ? __x64_sys_ioctl+0x193/0x200 [ 824.096157][T26900] ? do_syscall_64+0x2d/0x70 [ 824.101371][T26900] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 824.107503][T26900] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 824.113621][T26900] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 824.120143][T26900] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 824.126362][T26900] usb_submit_urb+0x6e4/0x1560 [ 824.131367][T26900] ? lockdep_init_map_waits+0x250/0x720 [ 824.137005][T26900] usb_start_wait_urb+0x101/0x4c0 [ 824.142556][T26900] ? usb_api_blocking_completion+0xa0/0xa0 [ 824.148798][T26900] ? kasan_unpoison_shadow+0x33/0x40 [ 824.154525][T26900] ? memset+0x20/0x40 [ 824.158795][T26900] usb_control_msg+0x31c/0x4a0 [ 824.163957][T26900] ? usb_start_wait_urb+0x4c0/0x4c0 [ 824.169294][T26900] ? wait_for_completion_io+0x260/0x260 [ 824.175420][T26900] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 824.182222][T26900] ? snoop_urb+0x64/0x130 [ 824.187840][T26900] do_proc_control+0x4cb/0x9c0 [ 824.193628][T26900] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 824.200131][T26900] usbdev_ioctl+0x12c1/0x3b20 [ 824.205270][T26900] ? processcompl_compat+0x680/0x680 [ 824.210701][T26900] ? lockdep_hardirqs_on+0x79/0x100 [ 824.216286][T26900] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 824.222587][T26900] ? do_vfs_ioctl+0xfc3/0x1090 [ 824.227508][T26900] ? do_vfs_ioctl+0x89a/0x1090 [ 824.232589][T26900] ? do_vfs_ioctl+0x27d/0x1090 [ 824.237658][T26900] ? generic_block_fiemap+0x60/0x60 [ 824.243149][T26900] ? lock_downgrade+0x6d0/0x6d0 [ 824.248317][T26900] ? _copy_to_user+0xdc/0x150 [ 824.253270][T26900] ? __fget_files+0x2e3/0x430 [ 824.258007][T26900] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 824.264586][T26900] ? processcompl_compat+0x680/0x680 [ 824.270358][T26900] __x64_sys_ioctl+0x193/0x200 [ 824.275183][T26900] do_syscall_64+0x2d/0x70 [ 824.280015][T26900] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 824.286314][T26900] RIP: 0033:0x45e149 [ 824.290582][T26900] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 824.312865][T26900] RSP: 002b:00007f1a1c4b5c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 824.322352][T26900] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e149 [ 824.331346][T26900] RDX: 0000000020000000 RSI: 00000000c0185500 RDI: 0000000000000003 [ 824.339655][T26900] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 824.349298][T26900] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 824.358894][T26900] R13: 00000000016afb7f R14: 00007f1a1c4b69c0 R15: 000000000119bf8c [ 824.368610][T26900] Kernel Offset: disabled [ 824.375891][T26900] Rebooting in 86400 seconds..