et6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @multicast1}}, 0x20) 17:44:38 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xfec2839194685645}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000240)={{0x3, 0x1, 0x1, 0x3, 0xe88}, 0x1, 0x1492, 0x5}) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(r6, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x48}}, 0x0) 17:44:38 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES32, @ANYPTR64, @ANYRESHEX, @ANYBLOB="66bd153d9fca1f3d4ada8d641bd79bfc8d335a6cb07aba4492632ecf507ea5d58ff571fc0ea2005c2477a68b56286de7f6c39a20c4a03b0c12717f48e1c462ad12892885fb00598926e239e47a64d134e0856ec4babf8a91f13855c38d909045406c0d59e33fd28972bb492830f4e6ce007e6e91b0a5d7f8da81d7e4e6d84e0818cd9ef6aea2c58c2da5ba2053a5d31861b8c39d8e331fce650c08d036bc9abb8365d87261a5fa5ede2c15ba5066d6"], 0x0, 0xcd}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x4}, {&(0x7f0000000000)=""/6, 0xffffffffffffff2c}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:44:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000180)) setsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0x0, &(0x7f0000000000)="bd8861b9231bb31b0959a9e3a0b4bc8fd548e52e53e9fe97bb1c0cbd301cbcc332f12e10ca654c016a0294cf183a63e4bb12bc1f8c5f40468356b0213084a4f4f0da376aa00c5749feb7c7e8c822e57cef02a8ba7786d7d18d7fb5a7829eef8473657b993ceefab7d759a097d3e1c0600b61b73b8f30570bf7ad720c7223a64aba3d53ed1e73550e971f45ec47e0350e40f11f8553f2b524e657d79f85dfdcc2320ff1e1d735f282ab4f7f302f9faf4eca0b59a35fcd3446609928b9c56ab1bfa8fdbaee7dd78f1f0acea64b17fd099bc7b4edaf6e9bfc093419", 0xda) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 884.387032] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:44:41 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = inotify_init() r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TCGETS2(r2, 0x4b3b, &(0x7f0000000000)) 17:44:41 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @multicast1}}, 0x20) 17:44:41 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES32, @ANYPTR64, @ANYRESHEX, @ANYBLOB="66bd153d9fca1f3d4ada8d641bd79bfc8d335a6cb07aba4492632ecf507ea5d58ff571fc0ea2005c2477a68b56286de7f6c39a20c4a03b0c12717f48e1c462ad12892885fb00598926e239e47a64d134e0856ec4babf8a91f13855c38d909045406c0d59e33fd28972bb492830f4e6ce007e6e91b0a5d7f8da81d7e4e6d84e0818cd9ef6aea2c58c2da5ba2053a5d31861b8c39d8e331fce650c08d036bc9abb8365d87261a5fa5ede2c15ba5066d6"], 0x0, 0xcd}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x4}, {&(0x7f0000000000)=""/6, 0xffffffffffffff2c}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:44:41 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, 0x0) 17:44:41 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xfec2839194685645}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000240)={{0x3, 0x1, 0x1, 0x3, 0xe88}, 0x1, 0x1492, 0x5}) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(r6, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x48}}, 0x0) 17:44:41 executing program 3: read$alg(0xffffffffffffffff, &(0x7f0000000180)=""/174, 0xae) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000000)={0x0, 0x14, 0x1d}) syz_open_dev$vcsu(0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_ADD(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="090200000000000000000100100069e930e3df1e3ac7fe182632b10e9f50346fd1ec9da8622832c534349d136c17434c11b82f96390790dfe33628b4e7a16218000000000000000dc6aeaca0c66e592ee4283adb149c7ba35d1cb360ba187d8066a0d6d04ba6bf0181a201ad14db6007000000d0daa808c964e7da55cea7e086d245706a2124d9590a41d7e38bea1d46bbd6f4c12435615c047507de69d23d239a74f49384816a726e3028618c2126363ebbea51f8e185381b88f337ff3ecc13d37a6b83d3d0d68c98afe3e18c17371021b2acd7ff38860590715eeb7e18ff71524b7c31d6153c602be6755d1ac752beca71e91d90c0b6f9a5ed0fa4c7be97f5cd565d17233908da9fe78474f81408ce181d763de419e45ea204437002d28f5810a4540e113061ca6e5281e5b439aa3aab1e92bdda43b710d236841838fc733270d6f1dd4d10100b2de76869f5eabadf6fb4191c4d1d442d5651ec3516b7b4294421aefef984cac1738cd804a65dbb209da7350a79e273bfcfc97c75b8d970626849b8223228fc5bcf4b8bcda77c54814cdfb76bf512880b5b9820d3753501e9c507363ea95611c5692c987ae36d62452ed4c26146d746d649ae050e6b238365920c5c8bac8b823f8d164ceef5cbb4ccde9a9b72180a5ada24d239ade3e1bec7e8a748004aa769787f67d62b9dcc99246151907100006ab40653984a0939e11c77b74ba73ef43368c37d05718e18fb2314d334ca9daacec22237dcd5b936cc45ce08729a8c72961042f1a0e4b74d9db7095d3d3e16a75de33593b8e7f0e4105d443674f600"/596], 0x14}}, 0x0) sendmsg$FOU_CMD_DEL(r1, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xffd7) pipe(&(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x80000000, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) 17:44:41 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @multicast1}}, 0x20) [ 886.729800] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 886.830363] Bluetooth: Invalid header checksum [ 886.835332] Bluetooth: Invalid header checksum [ 886.873685] kauditd_printk_skb: 7 callbacks suppressed [ 886.873699] audit: type=1800 audit(1586540681.304:4782): pid=25290 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16949 res=0 17:44:41 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @multicast1=0xe0000300}}, 0x20) 17:44:41 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, 0x0) 17:44:41 executing program 3: read$alg(0xffffffffffffffff, &(0x7f0000000180)=""/174, 0xae) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000000)={0x0, 0x14, 0x1d}) syz_open_dev$vcsu(0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_ADD(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="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"/596], 0x14}}, 0x0) sendmsg$FOU_CMD_DEL(r1, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xffd7) pipe(&(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x80000000, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) 17:44:41 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xfec2839194685645}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000240)={{0x3, 0x1, 0x1, 0x3, 0xe88}, 0x1, 0x1492, 0x5}) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(r6, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x48}}, 0x0) 17:44:41 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00'}) socket$netlink(0x10, 0x3, 0x9) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x4ffe0, 0x0) 17:44:41 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @multicast1}}, 0x20) [ 887.184777] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 887.259299] Bluetooth: Invalid header checksum [ 887.264288] Bluetooth: Invalid header checksum [ 887.295472] audit: type=1800 audit(1586540681.724:4783): pid=25314 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16950 res=0 [ 887.330852] selinux_nlmsg_perm: 5 callbacks suppressed [ 887.330871] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=48 sclass=netlink_audit_socket pig=25316 comm=syz-executor.0 [ 887.354482] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=25316 comm=syz-executor.0 [ 887.368107] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=25316 comm=syz-executor.0 17:44:41 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)) [ 887.479298] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=25316 comm=syz-executor.0 [ 887.537146] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=25316 comm=syz-executor.0 [ 887.576550] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=25316 comm=syz-executor.0 [ 887.611525] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=25316 comm=syz-executor.0 [ 887.655590] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=25316 comm=syz-executor.0 [ 887.663293] audit: type=1800 audit(1586540682.094:4784): pid=25323 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16952 res=0 [ 887.699362] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=25316 comm=syz-executor.0 [ 887.727361] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pig=25316 comm=syz-executor.0 17:44:44 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES32, @ANYPTR64, @ANYRESHEX, @ANYBLOB="66bd153d9fca1f3d4ada8d641bd79bfc8d335a6cb07aba4492632ecf507ea5d58ff571fc0ea2005c2477a68b56286de7f6c39a20c4a03b0c12717f48e1c462ad12892885fb00598926e239e47a64d134e0856ec4babf8a91f13855c38d909045406c0d59e33fd28972bb492830f4e6ce007e6e91b0a5d7f8da81d7e4e6d84e0818cd9ef6aea2c58c2da5ba2053a5d31861b8c39d8e331fce650c08d036bc9abb8365d87261a5fa5ede2c15ba5066d6"], 0x0, 0xcd}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x4}, {&(0x7f0000000000)=""/6, 0xffffffffffffff2c}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:44:44 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @multicast1}, 0x3f00}, 0x20) 17:44:44 executing program 3: inotify_init1(0x800) syz_mount_image$xfs(&(0x7f0000000180)='xfs\x00', &(0x7f0000000140)='./file0\x00', 0xfff, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="5846534200001000003f0000000010000000000000000000000000000000000034fb8fb9e4bf48b6ad26c597eb4f5c1900000000000000040000000000000d880000000000000d890000000000000d8a000000010000100000000001000000000000035ab424020004000004000000000000000000ec00000c090a020c", 0x7d}], 0x0, 0x0) 17:44:44 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xfec2839194685645}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000240)={{0x3, 0x1, 0x1, 0x3, 0xe88}, 0x1, 0x1492, 0x5}) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(r6, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x48}}, 0x0) 17:44:44 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)) 17:44:44 executing program 0: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/protocols\x00') preadv(r0, &(0x7f00000017c0)=[{&(0x7f00000005c0)=""/192, 0xc0}, {0x0}, {0x0}], 0x3, 0x10400001) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000040)=0xffff, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) 17:44:44 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @multicast1}, 0xff00}, 0x20) [ 889.789742] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:44:44 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[]}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f0000c9d23c0005000000", @ANYRES32, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="0104000000000000020000000c0001007463696e646578000c00020008000100ab750000b4da6326a9e21749f913e99bb480ef2fffabf7dd03c31caed02598f0a060720c81d93e0b58b1225ace24b42610e06cd049508ec03b90de062020ffd2871e5b5e73fc0c155387cfcac4387bf1e1d4d47265339243b33d3b9cc2753ca02d286022695238366800cd7853bd9bf81e69447a90eb2fdb6fd924aa8ea7"], 0x3c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 889.850594] audit: type=1800 audit(1586540684.284:4785): pid=25348 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16967 res=0 [ 889.871177] XFS (loop3): SB sanity check failed [ 889.876088] XFS (loop3): Metadata corruption detected at xfs_sb_read_verify+0x3f2/0x510, xfs_sb block 0xffffffffffffffff 17:44:44 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)) [ 889.940538] XFS (loop3): Unmount and run xfs_repair [ 889.972564] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 890.010153] 00000000f22fd7c8: 58 46 53 42 00 00 10 00 00 3f 00 00 00 00 10 00 XFSB.....?...... 17:44:44 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xfec2839194685645}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000240)={{0x3, 0x1, 0x1, 0x3, 0xe88}, 0x1, 0x1492, 0x5}) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(r6, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x48}}, 0x0) 17:44:44 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @multicast1}, 0x1000000}, 0x20) [ 890.071956] 0000000019aa7d9f: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 890.097743] 00000000c23a6dbe: 34 fb 8f b9 e4 bf 48 b6 ad 26 c5 97 eb 4f 5c 19 4.....H..&...O\. [ 890.132575] 0000000001f01d33: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 0d 88 ................ 17:44:44 executing program 0: syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x2000000600, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000140)="cefaace1b83c00009b26eec8e4a9e23f088f40dc", 0x14, 0xffffffffffffffff}], 0x20a8021, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x2, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000100)=@usbdevfs_driver={0xfffffffa, 0x9, &(0x7f00000001c0)="082ec726c03a225373d2f7c0e17e450172de5068d703644835c3e36be0d62aa858d320d585836f8cc4ed45d32f5c7b35782916b5308af4104179dd463c8b196c76050d5a3c1ec2289f4c0ab36755c65c9f30afb0fe663a61bab19747c0cd22bad35fd2d7e9036811dbca00b615ca33f78b0d42512d47019bb70a27392b767dcb78849c0453edebab2fb03de077459faab07ac68e044688145ec54639919ac91498d339079f92ea690701122d7d7d2bcba576f238d200389f23c6e7"}) [ 890.179544] 0000000068798fe5: 00 00 00 00 00 00 0d 89 00 00 00 00 00 00 0d 8a ................ [ 890.206222] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 890.228156] 00000000a7475dc8: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 890.267480] audit: type=1800 audit(1586540684.694:4786): pid=25386 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15874 res=0 [ 890.284469] 00000000527c1cfc: 00 00 03 5a b4 24 02 00 04 00 00 04 00 00 00 00 ...Z.$.......... [ 890.289493] Bluetooth: Invalid header checksum [ 890.304829] Bluetooth: Invalid header checksum [ 890.339734] 00000000dea822c4: 00 00 00 00 00 ec 00 00 0c 09 0a 02 0c 00 00 00 ................ [ 890.348668] Bluetooth: Invalid header checksum [ 890.361196] XFS (loop3): SB validate failed with error -117. 17:44:47 executing program 2 (fault-call:12 fault-nth:0): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0xffffffc0) 17:44:47 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES32, @ANYPTR64, @ANYRESHEX, @ANYBLOB="66bd153d9fca1f3d4ada8d641bd79bfc8d335a6cb07aba4492632ecf507ea5d58ff571fc0ea2005c2477a68b56286de7f6c39a20c4a03b0c12717f48e1c462ad12892885fb00598926e239e47a64d134e0856ec4babf8a91f13855c38d909045406c0d59e33fd28972bb492830f4e6ce007e6e91b0a5d7f8da81d7e4e6d84e0818cd9ef6aea2c58c2da5ba2053a5d31861b8c39d8e331fce650c08d036bc9abb8365d87261a5fa5ede2c15ba5066d6"], 0x0, 0xcd}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x4}, {&(0x7f0000000000)=""/6, 0xffffffffffffff2c}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:44:47 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @multicast1}, 0x3f000000}, 0x20) 17:44:47 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000240)={{0x3, 0x1, 0x1, 0x3, 0xe88}, 0x1, 0x1492, 0x5}) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(r6, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x48}}, 0x0) 17:44:47 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) eventfd(0x5) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r1, 0x0, &(0x7f0000000100)={{}, {r2, r3+30000000}}, &(0x7f0000000140)) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x60840, 0x0) tkill(0x0, 0x1000000000016) ptrace$getregs(0xc, 0x0, 0x8, &(0x7f0000000280)=""/120) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="10514f41291284113f37d6"], 0xb) r4 = openat$cgroup_ro(r0, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80000000}) ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000000000000009800"/32]) r5 = socket$inet6(0xa, 0x400000000001, 0x0) close(r5) sendfile(r5, 0xffffffffffffffff, 0x0, 0x200fff) accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000240)=0x14) 17:44:47 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) sendto$inet(r0, &(0x7f0000001340)="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", 0x638, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="8c2e4e70e7929aac3f37d6"], 0xb) sendmsg$AUDIT_TTY_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x3f8, 0x100, 0x70bd27, 0x25dfdbff, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20008800}, 0x24000000) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="0a268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 17:44:47 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @multicast1}, 0xff000000}, 0x20) [ 892.845985] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:44:47 executing program 0: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) lseek(r1, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="10514f41291284113f37d6"], 0xb) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f0000000000)={0x2, 0x6, 0x1}) r2 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0x0) write$P9_RSTATFS(r2, &(0x7f0000000140)={0x43}, 0xfec5) fcntl$lock(r0, 0x25, &(0x7f0000027000)={0x1}) truncate(&(0x7f0000000080)='./file0/bus\x00', 0x0) [ 892.974920] audit: type=1800 audit(1586540687.404:4787): pid=25429 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16193 res=0 [ 892.997937] Bluetooth: Invalid header checksum [ 893.003857] Bluetooth: Invalid header checksum 17:44:47 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0xffffffc0) 17:44:47 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="185d4f41291293113f37d6"], 0xb) setsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000000000)=0x2, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x178, 0x0, 0x178, 0x0, 0x178, 0x258, 0x258, 0x258, 0x258, 0x258, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [0xff000000], [0x0, 0xff], 'ip6gre0\x00', 'veth1_macvtap\x00'}, 0x0, 0x150, 0x178, 0x0, {}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'rose0\x00', {0x2b, 0x0, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x78}}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00'}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) 17:44:47 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @multicast1}}, 0x20) 17:44:47 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000240)={{0x3, 0x1, 0x1, 0x3, 0xe88}, 0x1, 0x1492, 0x5}) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(r6, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x48}}, 0x0) 17:44:47 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="2400000052001f0014f9f407000904000a000710080001", 0x17) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) dup2(r3, 0xffffffffffffffff) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[@ANYRESDEC=r3], 0x14) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 893.314592] audit: type=1800 audit(1586540687.744:4788): pid=25444 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16002 res=0 [ 893.325231] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 893.409625] selinux_nlmsg_perm: 70 callbacks suppressed [ 893.409640] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12336 sclass=netlink_route_socket pig=25454 comm=syz-executor.0 17:44:50 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES32, @ANYPTR64, @ANYRESHEX, @ANYBLOB="66bd153d9fca1f3d4ada8d641bd79bfc8d335a6cb07aba4492632ecf507ea5d58ff571fc0ea2005c2477a68b56286de7f6c39a20c4a03b0c12717f48e1c462ad12892885fb00598926e239e47a64d134e0856ec4babf8a91f13855c38d909045406c0d59e33fd28972bb492830f4e6ce007e6e91b0a5d7f8da81d7e4e6d84e0818cd9ef6aea2c58c2da5ba2053a5d31861b8c39d8e331fce650c08d036bc9abb8365d87261a5fa5ede2c15ba5066d6"], 0x0, 0xcd}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x4}, {&(0x7f0000000000)=""/6, 0xffffffffffffff2c}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:44:50 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @multicast1}}, 0x20) 17:44:50 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x2, &(0x7f0000000080)=0xffffffc0) 17:44:50 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e24, @remote}}}, 0x84) r3 = open(&(0x7f0000002000)='./bus\x00', 0xcc042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000080)) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) r4 = getpgrp(r0) tkill(r4, 0x1f) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_bond\x00'}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r5 = open(&(0x7f000054eff8)='./file0\x00', 0x0, 0x0) getdents(r5, &(0x7f0000077000)=""/133, 0x2800) 17:44:50 executing program 0: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x20, 0x0) ioctl$FICLONE(r0, 0x40049409, r0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 17:44:50 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000240)={{0x3, 0x1, 0x1, 0x3, 0xe88}, 0x1, 0x1492, 0x5}) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(r6, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x48}}, 0x0) 17:44:50 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r0, r1, 0x0, 0x200fff) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000000)=""/64, &(0x7f0000000040)=0x40) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x35d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x256f9d8f, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x15) readv(0xffffffffffffffff, 0x0, 0x0) 17:44:50 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @multicast1}}, 0x20) [ 896.009739] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 896.041174] Bluetooth: Invalid header checksum [ 896.046292] Bluetooth: Invalid header checksum [ 896.051396] audit: type=1800 audit(1586540690.474:4789): pid=25486 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16433 res=0 17:44:50 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x5, &(0x7f0000000180), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000500)=@nl=@unspec={0x0, 0x0, 0x0, 0x8dffffff}, 0x80, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x80, 0x2, 0x0, 0x1001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r1 = getpid() r2 = getpid() r3 = getpid() r4 = socket(0x10, 0x803, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200fff) ioctl$USBDEVFS_DISCARDURB(0xffffffffffffffff, 0x550b, &(0x7f0000000200)=0x400000000) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00080010090001006866736300000000080002000000000010d8b7442a54678e77078e38459408067025f416dc7e41e789e2e7529d891e0da818a6c2ef2649313c51aff9b44e19863b3caa1fe87d933a6d01cf28461f98626287646c4f3e6ce20e"], 0x3}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xf}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x4}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8b5, 0x4}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_WIPHY={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x44080}, 0x20000080) write$FUSE_POLL(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, 0x1, {0x4}}, 0x18) rt_tgsigqueueinfo(r3, r2, 0x16, &(0x7f0000000100)) ptrace(0x10, r2) ptrace$pokeuser(0x6, r1, 0x388, 0xfffffffffffffffe) [ 896.229216] audit: type=1800 audit(1586540690.524:4790): pid=25489 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16529 res=0 [ 896.302360] audit: type=1800 audit(1586540690.594:4791): pid=25490 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16529 res=0 17:44:50 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x4b47, &(0x7f0000000080)=0xffffffc0) 17:44:50 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x3f00}, 0x20) 17:44:50 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000240)={{0x3, 0x1, 0x1, 0x3, 0xe88}, 0x1, 0x1492, 0x5}) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(r6, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x48}}, 0x0) [ 896.403665] audit: type=1800 audit(1586540690.724:4792): pid=25486 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16433 res=0 [ 896.511171] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 896.560561] audit: type=1800 audit(1586540690.824:4793): pid=25474 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=16273 res=0 [ 896.664435] audit: type=1800 audit(1586540691.054:4794): pid=25520 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16529 res=0 [ 896.775832] audit: type=1800 audit(1586540691.154:4795): pid=25520 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16529 res=0 17:44:53 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES32, @ANYPTR64, @ANYRESHEX, @ANYBLOB="66bd153d9fca1f3d4ada8d641bd79bfc8d335a6cb07aba4492632ecf507ea5d58ff571fc0ea2005c2477a68b56286de7f6c39a20c4a03b0c12717f48e1c462ad12892885fb00598926e239e47a64d134e0856ec4babf8a91f13855c38d909045406c0d59e33fd28972bb492830f4e6ce007e6e91b0a5d7f8da81d7e4e6d84e0818cd9ef6aea2c58c2da5ba2053a5d31861b8c39d8e331fce650c08d036bc9abb8365d87261a5fa5ede2c15ba5066d6"], 0x0, 0xcd}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x4}, {&(0x7f0000000000)=""/6, 0xffffffffffffff2c}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:44:53 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0xff00}, 0x20) 17:44:53 executing program 0: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000240)={{0x3, 0x1, 0x1, 0x3, 0xe88}, 0x1, 0x1492, 0x5}) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(r6, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x48}}, 0x0) 17:44:53 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r1, r2, 0x0, 0x200fff) write$FUSE_LSEEK(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000240)={{0x3, 0x1, 0x1, 0x3, 0xe88}, 0x1, 0x1492, 0x5}) r5 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(r5, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x48}}, 0x0) 17:44:53 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x4b49, &(0x7f0000000080)=0xffffffc0) 17:44:53 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000507000000680000000000000000f26195b68bc7a5c5a189cff56113d64199f2b5c8dd08deab6371323d20d7abc04fcb75e22f1d34b00679cbe8347e13d83791bbc8d5be3528c181641ae9f08d900453deb623102f88", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="10514f41291284113f37d6"], 0xb) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000240)={0x2, 0x100, 0x7}) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700a47f793f000000ff030000", @ANYRES32=r9, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004bc0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) [ 899.129131] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 899.166342] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 899.208874] Bluetooth: Invalid header checksum [ 899.214670] Bluetooth: Invalid header checksum [ 899.232646] audit: type=1800 audit(1586540693.664:4796): pid=25545 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16722 res=0 17:44:53 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @multicast1}}, 0x20) [ 899.317492] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 899.384569] audit: type=1800 audit(1586540693.814:4797): pid=25551 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16722 res=0 17:44:53 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5409, &(0x7f0000000080)=0xffffffc0) [ 899.478861] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 17:44:54 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x3f00}, 0x20) [ 899.688691] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 899.717943] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 17:44:54 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r1, r2, 0x0, 0x200fff) write$FUSE_LSEEK(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000240)={{0x3, 0x1, 0x1, 0x3, 0xe88}, 0x1, 0x1492, 0x5}) r5 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(r5, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x48}}, 0x0) [ 899.778669] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 899.791247] Bluetooth: Invalid header checksum [ 899.798569] Bluetooth: Invalid header checksum [ 899.819491] audit: type=1800 audit(1586540694.254:4798): pid=25601 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16833 res=0 17:44:54 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0xff00}, 0x20) [ 899.959085] audit: type=1800 audit(1586540694.384:4799): pid=25606 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16833 res=0 [ 899.976146] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:44:54 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x540b, &(0x7f0000000080)=0xffffffc0) [ 900.298962] Bluetooth: Invalid header checksum [ 900.305226] Bluetooth: Invalid header checksum [ 900.321970] audit: type=1800 audit(1586540694.754:4800): pid=25624 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16721 res=0 [ 900.496388] audit: type=1800 audit(1586540694.924:4801): pid=25624 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16721 res=0 17:44:56 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES32, @ANYPTR64, @ANYRESHEX, @ANYBLOB="66bd153d9fca1f3d4ada8d641bd79bfc8d335a6cb07aba4492632ecf507ea5d58ff571fc0ea2005c2477a68b56286de7f6c39a20c4a03b0c12717f48e1c462ad12892885fb00598926e239e47a64d134e0856ec4babf8a91f13855c38d909045406c0d59e33fd28972bb492830f4e6ce007e6e91b0a5d7f8da81d7e4e6d84e0818cd9ef6aea2c58c2da5ba2053a5d31861b8c39d8e331fce650c08d036bc9abb8365d87261a5fa5ede2c15ba5066d6"], 0x0, 0xcd}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x4}, {&(0x7f0000000000)=""/6, 0xffffffffffffff2c}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:44:56 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f00000017c0), &(0x7f0000001800)=0x10, 0x80800) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001840)=ANY=[@ANYBLOB="10514f41291284113f37d6c4153715c2f23d37590f7669dcdc8fff320d834dfa1504de0ef1151bcb8c24f328e3e4dcd5134a82eee6c9826495b8bc3ba3608e1ef70588eb0ccc6d39d5ce87818dfa53b7fab7871d237f1d4ec173b08182dc339ff9f222a19d416e9e09e513b6cab87a51df0630a3f9a8f86d841fb757156cba79fce54a87682abffc8904679697ad623b315abf882d9aaf2f8fe53ef1eb1a25a1a1e40f2a423c00a04e90c4482da186104e0d7399c29686308d64f102fc8b3dec1b19ad733967da5ea8b0fa7ac281cef91f82e4186ff1fc99f811b4ef31bed86994"], 0xb) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000001a00)=ANY=[@ANYBLOB="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"], 0x454}, 0x1, 0x0, 0x0, 0x80}, 0x40000c0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xffffffff, @rand_addr='\x00@\x00'}, 0x1c) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000001780)={0xffffffffffffffff, &(0x7f00000006c0)="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", &(0x7f00000016c0)=""/182, 0x4}, 0x20) listen(r0, 0x1) r1 = socket$key(0xf, 0x3, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000200)={0x2e10d1b83cb3a4e7, 0x100, 0x3}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_emit_ethernet(0x63, &(0x7f0000001980)={@local, @remote, @void, {@ipx={0x8137, {0xffff, 0x55, 0xff, 0x1, {@random=0x31, @random="8718a4a0ecfd", 0xfff}, {@current, @current, 0x9}, "c46c6610c44dc986c20261f73f3dbd5103a0a63ef521df225bc1f11a1c3f64e1c45ec7c78043c696372fb02f0ddcbc2438ff5a4c7af089"}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6020920000200600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="80000009007800ff080a10000000000000020000"], 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) dup2(r3, 0xffffffffffffffff) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000180)=0x5) 17:44:56 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=r4, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, r4}, 0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000080)={r4, 0x5}, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ocfs2(&(0x7f0000000000)='ocfs2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='grpquota') 17:44:56 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @multicast1}}, 0x20) 17:44:56 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r1, r2, 0x0, 0x200fff) write$FUSE_LSEEK(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000240)={{0x3, 0x1, 0x1, 0x3, 0xe88}, 0x1, 0x1492, 0x5}) r5 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(r5, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x48}}, 0x0) 17:44:56 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x540c, &(0x7f0000000080)=0xffffffc0) [ 902.202851] audit: type=1800 audit(1586540696.634:4802): pid=25643 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16978 res=0 [ 902.216425] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 902.249791] (syz-executor.0,25643,0):ocfs2_parse_options:1513 ERROR: Invalid heartbeat mount options [ 902.273773] (syz-executor.0,25643,0):ocfs2_fill_super:1225 ERROR: status = -22 [ 902.298889] Bluetooth: Invalid header checksum [ 902.304276] Bluetooth: Invalid header checksum [ 902.326105] audit: type=1800 audit(1586540696.754:4803): pid=25656 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16981 res=0 [ 902.400569] audit: type=1800 audit(1586540696.834:4804): pid=25662 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16978 res=0 17:44:56 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, 0x20) 17:44:56 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@nat={'nat\x00', 0x19, 0x3, 0x3c8, [0x20000100, 0x0, 0x0, 0x20000328, 0x20000358], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x440) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000500)={0x0, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e22, @local}, {0x2, 0x4e24, @broadcast}, 0x60, 0x0, 0x0, 0x0, 0x400, &(0x7f0000000000)='sit0\x00', 0x8, 0x5, 0x1f}) 17:44:56 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x30}, 0xc) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) [ 902.494265] audit: type=1800 audit(1586540696.924:4805): pid=25664 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16981 res=0 17:44:57 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000240)={{0x3, 0x1, 0x1, 0x3, 0xe88}, 0x1, 0x1492, 0x5}) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(r6, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x48}}, 0x0) 17:44:57 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x540d, &(0x7f0000000080)=0xffffffc0) 17:44:57 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00}, 0x20) [ 902.715139] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 902.799175] Bluetooth: Invalid header checksum [ 902.804327] Bluetooth: Invalid header checksum 17:44:59 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES32, @ANYPTR64, @ANYRESHEX, @ANYBLOB="66bd153d9fca1f3d4ada8d641bd79bfc8d335a6cb07aba4492632ecf507ea5d58ff571fc0ea2005c2477a68b56286de7f6c39a20c4a03b0c12717f48e1c462ad12892885fb00598926e239e47a64d134e0856ec4babf8a91f13855c38d909045406c0d59e33fd28972bb492830f4e6ce007e6e91b0a5d7f8da81d7e4e6d84e0818cd9ef6aea2c58c2da5ba2053a5d31861b8c39d8e331fce650c08d036bc9abb8365d87261a5fa5ede2c15ba5066d6"], 0x0, 0xcd}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x4}, {&(0x7f0000000000)=""/6, 0xffffffffffffff2c}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:44:59 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000012afe4)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="10514f41291284113f37d6"], 0xb) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f00000000c0)) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000000)) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1, 0x80) sendto$inet6(r2, &(0x7f0000000040)='F', 0x1, 0x20000003, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000040)='F', 0xfffffffffffffe43, 0x20000003, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0) 17:44:59 executing program 3: perf_event_open(&(0x7f0000000600)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket(0x10, 0x80002, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040), 0x4) getpid() r1 = getpid() r2 = getpid() getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000200), &(0x7f0000000240)=0x4) rt_tgsigqueueinfo(r2, r1, 0x0, &(0x7f0000000100)) clock_adjtime(0x3, 0x0) semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x4e22, @empty=0x4c00}, {0x2, 0x4e20, @loopback=0x7f00000b}, {0x2, 0x4e24, @empty}, 0x96, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x40}) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e22, @local}, {0x2, 0x4e22, @rand_addr=0x7}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x14}}, 0x20, 0x0, 0x0, 0x0, 0x3e91, &(0x7f0000000000)='vxcan1\x00', 0x3, 0x2, 0x1f}) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x10001, 0x0) ioctl$RTC_ALM_SET(r4, 0x40247007, &(0x7f0000000380)={0xb, 0x29, 0x13, 0x16, 0x4, 0x8000006, 0x4, 0x119, 0xfffffffffffffffe}) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0x20, @dev}, {0x2, 0x0, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x2, 0x46a}) r5 = dup3(r3, r0, 0x80000) ioctl$USBDEVFS_BULK(r5, 0xc0185502, &(0x7f0000000000)={{}, 0x5, 0x7, 0xffffffffffffffff}) semget(0x2, 0x4, 0x200) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r6, &(0x7f0000000340)={&(0x7f0000000040)=@in={0x2, 0x0, @loopback}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000140)='G', 0x1}], 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB="18010000000000008400000007000000ac1e0001000000004a129d83605cbe2ed4c97299f369d9c504e7645ab528cb2ecaa9b155c08d5d76d5288fa7461c467a3672c873449d35b479a00d8d2a095e6b9d2e15c4e8e43c2ecea4f9a31fc3e6c435c3c3a949b33456167ae8ae93d6b09707d9d3a11f909d3b6d5a946be7cd7f23b154c26a33b20f87a1eacf9bc668836c6009bf3229"], 0x18}, 0x0) 17:44:59 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @multicast1}}, 0x20) 17:44:59 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000240)={{0x3, 0x1, 0x1, 0x3, 0xe88}, 0x1, 0x1492, 0x5}) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(r6, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x48}}, 0x0) 17:44:59 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5413, &(0x7f0000000080)=0xffffffc0) 17:44:59 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, 0x20) [ 905.394974] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 905.469654] Bluetooth: Invalid header checksum [ 905.474646] Bluetooth: Invalid header checksum [ 905.495932] kauditd_printk_skb: 3 callbacks suppressed [ 905.495946] audit: type=1800 audit(1586540699.924:4809): pid=25722 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=17005 res=0 17:45:00 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00}, 0x20) 17:45:00 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a9e38ed6ecb", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x1808, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000100)="24ab0461e65647c56be492d9a014511477c9756e18564a4f3358c185e5dfa3a82e8bdb1b000a7b6a0301e0742f807e63c4d089ea3df17833dbdb468b203164263ec6eace14310c64bcab0bae268f48749e3555e40806f9", 0x57}]) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0000002400a200"/20, @ANYRES32=r5, @ANYBLOB="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"], 0x6c}}, 0x0) 17:45:00 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5414, &(0x7f0000000080)=0xffffffc0) [ 905.700006] audit: type=1800 audit(1586540700.084:4810): pid=25732 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=17005 res=0 17:45:00 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000240)={{0x3, 0x1, 0x1, 0x3, 0xe88}, 0x1, 0x1492, 0x5}) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(r6, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x48}}, 0x0) 17:45:00 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x20) [ 905.961116] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 906.019761] Bluetooth: Invalid header checksum [ 906.025173] audit: type=1800 audit(1586540700.454:4811): pid=25742 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=17006 res=0 [ 906.045849] Bluetooth: Invalid header checksum [ 906.182282] audit: type=1800 audit(1586540700.614:4812): pid=25753 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=17006 res=0 17:45:02 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES32, @ANYPTR64, @ANYRESHEX, @ANYBLOB="66bd153d9fca1f3d4ada8d641bd79bfc8d335a6cb07aba4492632ecf507ea5d58ff571fc0ea2005c2477a68b56286de7f6c39a20c4a03b0c12717f48e1c462ad12892885fb00598926e239e47a64d134e0856ec4babf8a91f13855c38d909045406c0d59e33fd28972bb492830f4e6ce007e6e91b0a5d7f8da81d7e4e6d84e0818cd9ef6aea2c58c2da5ba2053a5d31861b8c39d8e331fce650c08d036bc9abb8365d87261a5fa5ede2c15ba5066d6"], 0x0, 0xcd}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x4}, {&(0x7f0000000000)=""/6, 0xffffffffffffff2c}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:45:02 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5415, &(0x7f0000000080)=0xffffffc0) 17:45:02 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}, 0x20) 17:45:02 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ttyS3\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r1, r2, 0x0, 0x200fff) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000600)=0xe) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 17:45:02 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000240)={{0x3, 0x1, 0x1, 0x3, 0xe88}, 0x1, 0x1492, 0x5}) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(r6, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x48}}, 0x0) 17:45:02 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=ANY=[@ANYBLOB=')\n\x00\x00', @ANYRES16=r5, @ANYBLOB="010300000000000000000600000008000300", @ANYRES32=r8, @ANYBLOB], 0x1c}}, 0x0) r9 = socket(0x10, 0x803, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001400b59500000000000000000a400000", @ANYRES32=r11, @ANYBLOB="1400020000000000000000000000ffff0000000096bee940f50492b08f7df62827c0f92ca993654341b491bcd508e437df1239da3bf8e2cc43119e1016c2c5cc4f5357dbbb6d4aeb5d85e3aaafae0110ffb16baf075c9878fce6f36ceeeb5a77be233867e63353ea4ff598c97cd3a68259a54867b212f0e3a08d02703d2d7c1e35e9"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1000}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4040040) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fe, &(0x7f0000000180)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10) sendto$inet(r3, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x1f4, 0x0, 0xf0000000000e803) [ 908.427555] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:45:02 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000}, 0x20) [ 908.506670] audit: type=1800 audit(1586540702.934:4813): pid=25778 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=17002 res=0 [ 908.529041] Bluetooth: Invalid header checksum [ 908.562771] Bluetooth: Invalid header checksum [ 908.617889] audit: type=1800 audit(1586540702.974:4814): pid=25785 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=17021 res=0 17:45:03 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5416, &(0x7f0000000080)=0xffffffc0) 17:45:03 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000240)={{0x3, 0x1, 0x1, 0x3, 0xe88}, 0x1, 0x1492, 0x5}) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(r6, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x48}}, 0x0) 17:45:03 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @multicast1}}, 0x3) [ 908.868889] audit: type=1800 audit(1586540703.174:4815): pid=25785 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=17021 res=0 17:45:03 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x4802, 0x0, 0x2f9, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000001340)="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", 0x1000) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) clock_gettime(0x3, &(0x7f00000000c0)={0x0, 0x0}) clock_settime(0x7, &(0x7f0000000400)={r1, r2+10000000}) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x20, 0x0, 0x8, 0x301, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x0) timer_delete(r4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window={0x3, 0x7}, @mss={0x2, 0x919f}, @timestamp, @mss={0x2, 0x8}], 0x6) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(0xffffffffffffffff, &(0x7f0000000640)="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"/611, 0xffffffffffffff67, 0x40007bd, 0x0, 0xffffffffffffff4f) 17:45:03 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @multicast1}}, 0x13) [ 909.002408] audit: type=1800 audit(1586540703.194:4816): pid=25780 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=17002 res=0 [ 909.039173] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 909.147236] audit: type=1800 audit(1586540703.574:4817): pid=25824 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=17011 res=0 [ 909.272691] audit: type=1800 audit(1586540703.654:4818): pid=25825 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=17011 res=0 17:45:05 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES32, @ANYPTR64, @ANYRESHEX, @ANYBLOB="66bd153d9fca1f3d4ada8d641bd79bfc8d335a6cb07aba4492632ecf507ea5d58ff571fc0ea2005c2477a68b56286de7f6c39a20c4a03b0c12717f48e1c462ad12892885fb00598926e239e47a64d134e0856ec4babf8a91f13855c38d909045406c0d59e33fd28972bb492830f4e6ce007e6e91b0a5d7f8da81d7e4e6d84e0818cd9ef6aea2c58c2da5ba2053a5d31861b8c39d8e331fce650c08d036bc9abb8365d87261a5fa5ede2c15ba5066d6"], 0x0, 0xcd}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x4}, {&(0x7f0000000000)=""/6, 0xffffffffffffff2c}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:45:05 executing program 0: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000380)=ANY=[], 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x80, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r1) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) 17:45:05 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @multicast1}}, 0x5000) 17:45:05 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5418, &(0x7f0000000080)=0xffffffc0) 17:45:05 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000240)={{0x3, 0x1, 0x1, 0x3, 0xe88}, 0x1, 0x1492, 0x5}) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(r6, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x48}}, 0x0) 17:45:05 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsa\x00', 0x80000, 0x0) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f0000000180)={[{0x39, 0x44f7, 0x9, 0x40, 0x8, 0x7, 0x4, 0x40, 0x6, 0x0, 0x2, 0x1f, 0x2}, {0x8, 0x3, 0x2, 0x4, 0x42, 0x8, 0x3f, 0xca, 0x9, 0xce, 0x8, 0xad, 0x2b39}, {0x5, 0x4, 0x0, 0xe1, 0x9, 0x4, 0x3f, 0x80, 0x81, 0x20, 0x3f, 0x0, 0x7}], 0x7}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x4400, 0x0) mlockall(0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$smc(0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000000000000000900dfdf6000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a0000000000140003006970766c616e31000000000000000000"], 0x3c}}, 0x0) [ 911.536681] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:45:06 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/mdstat\x00', 0x0, 0x0) bind$l2tp(r1, &(0x7f0000000200)={0x2, 0x0, @rand_addr=0x48, 0x2}, 0x10) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="10514f53291284113f37d6"], 0xb) r2 = socket(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x40, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xfffffffe}, 0x10}, 0x78) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000000)=r3, 0x4) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r4, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @multicast1}}, 0x20) [ 911.643154] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=25873 comm=syz-executor.3 [ 911.730075] Bluetooth: Invalid header checksum [ 911.735203] Bluetooth: Invalid header checksum [ 911.745451] audit: type=1800 audit(1586540706.174:4819): pid=25885 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=17041 res=0 17:45:06 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(r6, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x48}}, 0x0) 17:45:06 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x541b, &(0x7f0000000080)=0xffffffc0) 17:45:06 executing program 3: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, "00006371ae9b1c01"}}}}}, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r0, r1, 0x0, 0x200fff) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=r4, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, r4}, 0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000080)={r4, @in={{0x2, 0x4e20, @multicast2}}}, &(0x7f0000000140)=0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000180)={r5, @in6={{0xa, 0x4e20, 0x7a, @mcast1, 0x80}}}, &(0x7f0000000240)=0x84) [ 911.896547] audit: type=1800 audit(1586540706.304:4820): pid=25885 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=17041 res=0 17:45:06 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @multicast1}}, 0x20) r1 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000000040)={'veth1_macvtap\x00', {0x2, 0x4e21, @remote}}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) dup2(r2, 0xffffffffffffffff) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r3, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="10514f41291284113f37d6d3f19fa527ab33d96be6d65a3f0095"], 0xb) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000080)={r2, r3}) [ 912.058223] audit: type=1800 audit(1586540706.484:4821): pid=25909 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=17045 res=0 17:45:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000033000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x48}], 0x1, 0x0, 0x0, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r3, r4, 0x0, 0x200fff) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000140)) r5 = socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$bt_BT_RCVMTU(r5, 0x112, 0xd, &(0x7f00000001c0)=0x5, 0x2) r6 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_config_ext={0x280}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xac0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000037000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x8, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x3c, &(0x7f0000000280)=[@in6={0xa, 0x0, 0x0, @mcast1}, @in, @in={0x2, 0x0, @multicast1}]}, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) [ 912.181574] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 912.203986] audit: type=1800 audit(1586540706.524:4822): pid=25909 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=17045 res=0 [ 912.327826] audit: type=1800 audit(1586540706.534:4823): pid=25909 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=17045 res=0 [ 912.390996] audit: type=1800 audit(1586540706.534:4824): pid=25909 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=17045 res=0 [ 912.466423] audit: type=1800 audit(1586540706.644:4825): pid=25913 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=17027 res=0 [ 912.557882] audit: type=1800 audit(1586540706.794:4826): pid=25926 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=17027 res=0 [ 912.609387] audit: type=1800 audit(1586540706.864:4827): pid=25929 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=17035 res=0 [ 912.627720] kvm [25921]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0x186 data 0x1 [ 912.719764] audit: type=1800 audit(1586540707.154:4828): pid=25940 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=17035 res=0 17:45:08 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES32, @ANYPTR64, @ANYRESHEX, @ANYBLOB="66bd153d9fca1f3d4ada8d641bd79bfc8d335a6cb07aba4492632ecf507ea5d58ff571fc0ea2005c2477a68b56286de7f6c39a20c4a03b0c12717f48e1c462ad12892885fb00598926e239e47a64d134e0856ec4babf8a91f13855c38d909045406c0d59e33fd28972bb492830f4e6ce007e6e91b0a5d7f8da81d7e4e6d84e0818cd9ef6aea2c58c2da5ba2053a5d31861b8c39d8e331fce650c08d036bc9abb8365d87261a5fa5ede2c15ba5066d6"], 0x0, 0xcd}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x4}, {&(0x7f0000000000)=""/6, 0xffffffffffffff2c}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:45:08 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="10514f41291284113f37d6"], 0xb) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=r2, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, r2}, 0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000100)={r2, @in6={{0xa, 0x4e20, 0x3452, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}}, 0xd8, 0x9}, &(0x7f0000000200)=0x90) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000240)={r3, 0x89}, 0x8) close(r0) r4 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r0, r4, 0x0, 0x200fff) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000040)=0x1a000, 0x4) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r5, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r5, &(0x7f0000000400)=ANY=[@ANYBLOB="10514f41291284113f37d6"], 0xb) setsockopt$TIPC_MCAST_REPLICAST(r5, 0x10f, 0x86) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000000)={@empty}, 0x20) getitimer(0x0, &(0x7f0000000080)) 17:45:08 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x541d, &(0x7f0000000080)=0xffffffc0) 17:45:08 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(r6, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x48}}, 0x0) 17:45:08 executing program 3: writev(0xffffffffffffffff, 0x0, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x10000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f0000000100)=0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, 0x0) sysfs$3(0x3) io_destroy(r0) syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="10514f41291284113f37d6"], 0xb) accept4(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000180)=0x80, 0x81000) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r4, 0x533, 0x0, 0x0, {{}, {}, {0x9}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x24, r4, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x81e}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}}, 0x4000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000140)={r5, 0x1}, 0x8) 17:45:08 executing program 0: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000040)="600084e002000a0000000001000000c98f13", 0x12, 0x400}, {&(0x7f0000000540)="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", 0x309, 0x34f9}], 0x0, 0x0) acct(&(0x7f0000000480)='./file0\x00') pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) dup(0xffffffffffffffff) syz_open_dev$loop(0x0, 0x3, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x20200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000500)='./file0\x00', 0x8000000000000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) dup2(r1, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) dup2(r2, r0) [ 914.691065] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 914.703028] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 914.759089] Bluetooth: Invalid header checksum [ 914.764306] Bluetooth: Invalid header checksum [ 914.781825] Process accounting resumed [ 914.870981] minix_free_inode: bit 1 already cleared 17:45:09 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x541e, &(0x7f0000000080)=0xffffffc0) 17:45:09 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="10514f41291284113f37d6"], 0xb) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xd41053a03d683de0}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x1401, 0x800, 0x70bd29, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}}, 0x4000000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @multicast1}}, 0x20) 17:45:09 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(r6, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x48}}, 0x0) 17:45:09 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xae, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0xb8000, 0x0) ioctl$USBDEVFS_GETDRIVER(r3, 0x41045508, &(0x7f0000000040)={0x3, "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"}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) r5 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r4, r5, 0x0, 0x200fff) fcntl$getown(r4, 0x9) syz_open_procfs(0x0, 0xffffffffffffffff) [ 915.204639] Process accounting resumed [ 915.255593] Bluetooth: Invalid header checksum [ 915.268568] Bluetooth: Invalid header checksum 17:45:09 executing program 5: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @multicast1}}, 0x20) 17:45:09 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{}, {0x0, 0x9}}, 0x0) timer_create(0x4, &(0x7f0000000000)={0x0, 0x14, 0x1}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}}, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) pread64(r1, 0x0, 0xfeffffff, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r3, r4, 0x0, 0x200fff) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000100)={0x2, 0xf2477eb, 0xff, 0x0, 0x1a}) dup2(r2, r1) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, 0x0) lseek(r3, 0x2, 0x3) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0xb) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000200)={0x9f0000, 0x400, 0x100, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x980927, 0xd2, [], @value64=0x3f}}) [ 915.404128] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:45:12 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES32, @ANYPTR64, @ANYRESHEX, @ANYBLOB="66bd153d9fca1f3d4ada8d641bd79bfc8d335a6cb07aba4492632ecf507ea5d58ff571fc0ea2005c2477a68b56286de7f6c39a20c4a03b0c12717f48e1c462ad12892885fb00598926e239e47a64d134e0856ec4babf8a91f13855c38d909045406c0d59e33fd28972bb492830f4e6ce007e6e91b0a5d7f8da81d7e4e6d84e0818cd9ef6aea2c58c2da5ba2053a5d31861b8c39d8e331fce650c08d036bc9abb8365d87261a5fa5ede2c15ba5066d6"], 0x0, 0xcd}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x4}, {&(0x7f0000000000)=""/6, 0xffffffffffffff2c}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:45:12 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5421, &(0x7f0000000080)=0xffffffc0) 17:45:12 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0xc4242, 0x0) sendfile(r0, r1, 0x0, 0x200fff) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000080)={0xcac, 0xe0, 0x401, 0x1, 0x75, 0x3, 0xffff}, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f0000000000)={@loopback}, 0x20) ioctl$SCSI_IOCTL_SYNC(r2, 0x4) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x80400, 0x0) setsockopt$inet6_int(r3, 0x29, 0x12, &(0x7f0000000140), 0x4) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDGKBMODE(r4, 0x4b44, &(0x7f0000000040)) 17:45:12 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r6 = socket(0x0, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(r6, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x48}}, 0x0) 17:45:12 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000001ac0)='./file0\x00', 0x0) r0 = open(&(0x7f0000001680)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') lsetxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='trusted.overlay.opaque\x00', &(0x7f0000000140)='y\x00', 0x2, 0x2) close(r1) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="10514f41291284113f37d6"], 0xb) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r2, 0x118, 0x1, &(0x7f0000000180)=0x3, 0x4) 17:45:12 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11d000}) pselect6(0x40, &(0x7f0000000080)={0xffffffff, 0x1, 0x6, 0x5, 0xd00, 0x1, 0x4, 0xffffffffffff3b16}, &(0x7f00000000c0)={0xfffffffffffffffb, 0x8, 0x200, 0x7ff, 0x0, 0x20, 0x7ab, 0x90}, &(0x7f0000000100)={0x8001, 0x8, 0x2, 0x0, 0x3, 0x9}, &(0x7f00000001c0), &(0x7f0000000280)={&(0x7f0000000200)={[0x1]}, 0x8}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000140)={0x2, &(0x7f0000000040)=[{0x0, 0x6, 0x0, 0xfffff71b}, {0x7f}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 917.767102] kauditd_printk_skb: 11 callbacks suppressed [ 917.767116] audit: type=1800 audit(1586540712.194:4840): pid=26041 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=17085 res=0 [ 917.820275] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 917.828952] Bluetooth: Invalid header checksum [ 917.835326] Bluetooth: Invalid header checksum 17:45:12 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r1, r2, 0x0, 0x200fff) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000080)}}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_FLAGS={0x6}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x48}}, 0x0) [ 917.938932] Bluetooth: Invalid header checksum [ 917.991489] audit: type=1800 audit(1586540712.314:4841): pid=26049 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=17084 res=0 17:45:12 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r6 = socket(0x0, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(r6, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x48}}, 0x0) 17:45:12 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @multicast1}}, 0x20) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="10514f41291284113f37d6"], 0xb) ioctl$NS_GET_NSTYPE(r1, 0xb703, 0x0) [ 918.103397] audit: type=1800 audit(1586540712.404:4842): pid=26050 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=17085 res=0 17:45:12 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xffffffc0) [ 918.147353] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 918.235113] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 918.249641] audit: type=1800 audit(1586540712.514:4843): pid=26049 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=17084 res=0 [ 918.362628] audit: type=1800 audit(1586540712.574:4844): pid=26064 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=17073 res=0 [ 918.398815] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:45:12 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x200, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_IP_TARGET={0x4}, @IFLA_BOND_ARP_INTERVAL={0x8}]}}}]}, 0x40}}, 0x0) 17:45:12 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x7f, 0x400180) ioctl$VIDIOC_ENUMAUDIO(r2, 0xc0345641, &(0x7f0000000140)={0x6, "410bd214882f687cd820405057257ee34312d459bc7cdfb104d9fb3e9e1fb671", 0x0, 0x1}) ioctl$SIOCX25SCUDMATCHLEN(r2, 0x89e7, &(0x7f0000000180)={0x43}) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ocfs2\x00', 0x0, 0x0) [ 918.489038] Bluetooth: Invalid header checksum [ 918.493913] Bluetooth: Invalid header checksum [ 918.510875] audit: type=1800 audit(1586540712.664:4845): pid=26064 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=17073 res=0 [ 918.626135] audit: type=1800 audit(1586540712.914:4846): pid=26094 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=17085 res=0 [ 918.742623] audit: type=1800 audit(1586540713.054:4847): pid=26094 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=17085 res=0 17:45:15 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES32, @ANYPTR64, @ANYRESHEX, @ANYBLOB="66bd153d9fca1f3d4ada8d641bd79bfc8d335a6cb07aba4492632ecf507ea5d58ff571fc0ea2005c2477a68b56286de7f6c39a20c4a03b0c12717f48e1c462ad12892885fb00598926e239e47a64d134e0856ec4babf8a91f13855c38d909045406c0d59e33fd28972bb492830f4e6ce007e6e91b0a5d7f8da81d7e4e6d84e0818cd9ef6aea2c58c2da5ba2053a5d31861b8c39d8e331fce650c08d036bc9abb8365d87261a5fa5ede2c15ba5066d6"], 0x0, 0xcd}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x4}, {&(0x7f0000000000)=""/6, 0xffffffffffffff2c}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:45:15 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r6 = socket(0x0, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(r6, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x48}}, 0x0) 17:45:15 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x5000) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000100)=0x400, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) dup2(r2, 0xffffffffffffffff) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000040)={0x1, 0x1, 0x4, 0x20000, 0xfffffffb, {0x0, 0x7530}, {0x3, 0x8, 0x9, 0x1f, 0xa2, 0x80, "035ffd36"}, 0xd8, 0x4, @offset=0x7, 0x10000, 0x0, r2}) ioctl$USBDEVFS_CONNECTINFO(r3, 0x40085511, &(0x7f00000000c0)) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @null, @netrom={'nr', 0x0}, 0x8, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @null, @bcast, @default, @default]}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @multicast1}}, 0x20) prctl$PR_SET_TIMERSLACK(0x1d, 0x7fffffff) r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="10514f41291284113f37d6"], 0xb) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f00000002c0)={r0, 0xffffffffffffffff, 0x8, 0xbe, &(0x7f0000000200)="117355563cda7b0259e178d8bc69adf965ebf6b3f25579b451ead42baffef00e321b40ca96e2251dfa282f79cb60a2a6afda1f696f7d2e6ddcdc5ccb385ea9c543ffd5580480e48522bb82219713573db2827fc41c9698c97beedd6cfcd4316e2d884f408ad4fa3f2459b8b3ec03c9534c6073176c439d0fe678c0a3599883d5b3268c9250dd831b20fa48bb97144761813f5d5b054dcbdc0443509417bf5c695c0e4903e88b67e13f43231ea9e9aecad90f7c7eb152e18beb932462bbaf", 0x1f, 0x0, 0x100, 0x0, 0xf227, 0x7, 0xd472, 'syz0\x00'}) r5 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x4) sendfile(r4, r5, 0x0, 0x200fff) ioctl$TCGETA(r5, 0x5405, &(0x7f00000001c0)) 17:45:15 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5424, &(0x7f0000000080)=0xffffffc0) 17:45:15 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000480)="80ee57711f6cb58f7941ca26ec3b53a9251c52d300f377a29404cf68d9caed61bed3a11c79f17602f73d5e84aacb635a4a19ded75b52245136b311de3c53e6f410c1", 0x42}], 0x1}, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001680)='/dev/dlm-control\x00', 0xe0142, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="bf16000000000000b70700000100e7ff4070000000000000cf7000000000000095000000000000007c4177656e9d8a25754986b2841fb71916254466b3b65025359ebaaa298793411c22f901fb70fc5b4e982661d68b61c1ba6e53657b8dc7c5bb72290946131bc6e7fae8bc5e5c45d8cfc8c575b46e55b9b5b14dc6de58bb048d2e9ec9b5d29ab9e06bdb414497312320fd387df6ed006f2cc51cc11505e90fbda600000000004e6ac6eb534811d7e05c8a0e23b8c84db9602358af9ffb55864888a2410845cfb4ad8104d8d66a8369cc448c32cbc0554050995d2701ed149472fcb5ce735fe57b4c10dacf5d3766f10254130bf6d81cbe676a4b0b74efe6e20e94bf0c6fb169950900000082e44162085fe742807e212826c70fbc0492e0bd8c08398269936a4663f281d2d433882837ca5ae50787582689e24c872d0000000000000000000000000000d7a8463d79d793f1c9ebecd285fae1f72c9e7d59ca5f9123d6092b30902b4b143d1ec9b62e21d8d62fb989ac8fa119b3d8650c2e9d81ad7d7cf91f5af32cc416029ce20e434b1c0400a4339cc02780894ed91e703d4ded0ca2e748cdcfecd41b2f82bb44a02731cf30a738c09166de5f65af363854e725c867bd3cea4431ef5913a51296c1774a3f803f024a39ab7a6386fa7d63fe3849f5790fa1418b39fcae124263def2bcd3bf3971a873fc3f687740a17d8f19193e22c551"], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000000)=r5, 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r6, 0x1}, 0x14}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000001800)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000017c0)={&(0x7f0000001700)={0x88, r6, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x3c, 0x2d, 0x0, 0x1, [{0x9, 0x0, [0x5, 0xb, 0x5, 0x1c, 0x11]}, {0x9, 0x0, [0x1e, 0x18, 0x6, 0x11, 0x16]}, {0x5, 0x0, [0x1]}, {0xb, 0x0, [0x1a, 0x15, 0x1d, 0x1c, 0x0, 0x18, 0x10]}, {0x9, 0x0, [0x8, 0x20, 0x17, 0x16, 0x6]}]}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x80}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x8001}, @NL80211_ATTR_BSSID={0xa, 0xf5, @remote}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCAN_SSIDS={0xc, 0x2d, 0x0, 0x1, [{0x7, 0x0, [0x1d, 0x14, 0x2]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20048004}, 0x800) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 17:45:15 executing program 0: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000080)=0x5) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="10514f41291284113f37d6"], 0xb) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=r0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, r0}, 0x10) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000540)=ANY=[@ANYRES32=r0, @ANYBLOB="ff011600ff12bd71eb276e1bc800e0ff73cbf9f6e6ad629b7cf59a64d92bf51b34f2b19853cd9b5968c6139ce84b0ea80c3cdf20f93ec3a2db43ebc7fc3406237f2e09a95d15427a6e366c36d257af789177acb55990609bd6408963680c50d9bfbb06b1247fbf885325fa35e92cc1549755bb170f528cbd499e6c6b2f7a21291453bf6de7f078df62ce3405613970602e1288a64f08a8025ca2965d93ddef7ce74679f51707b3f4afac2afd6bc9062d0ea1f746a4fe1aba4825a1acc140db740bbbbf8c9c5b9c14a607f7"], &(0x7f00000000c0)=0x14) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r1) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3, 0xfffffffd}, 0x3c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x2, 0x201, 0x1, 0xfee6}, 0x40) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.swap.current\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r3) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x127) sendmsg$tipc(r4, &(0x7f0000000500)={&(0x7f0000000280)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x0, 0xc}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000001580)="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", 0xffe0}], 0x1, 0x0, 0x0, 0xa000a0}, 0x4000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000005080)={0xffffffffffffffff, 0xc0, &(0x7f0000004fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004e80)=0x1ff, 0x0, 0x0, 0x0, &(0x7f0000004ec0)={0x6, 0x2}, 0x0, 0x0, &(0x7f0000004f00)={0x1, 0xf, 0x7, 0x9}, &(0x7f0000004f40)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004f80)=0x1769}}, 0x10) gettid() socket$kcm(0xa, 0x0, 0x11) [ 920.735566] audit: type=1800 audit(1586540715.164:4848): pid=26116 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=16002 res=0 17:45:15 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="10514f41291284113f37d6"], 0xb) sendmsg$AUDIT_TRIM(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f6, 0x400, 0x70bd2d, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000400}, 0x80) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r1, r2, 0x0, 0x200fff) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000200)={{{@in=@multicast1, @in6=@local}}, {{@in6=@initdev}, 0x0, @in=@empty}}, &(0x7f0000000140)=0xe8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @multicast1}}, 0x20) [ 920.840820] audit: type=1800 audit(1586540715.204:4849): pid=26116 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=16002 res=0 [ 920.847351] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:45:15 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5425, &(0x7f0000000080)=0xffffffc0) [ 921.038723] EXT4-fs (loop3): Unrecognized mount option "€Ð" or missing value 17:45:15 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r6 = socket(0xa, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(r6, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x48}}, 0x0) [ 921.110385] EXT4-fs (loop3): failed to parse options in superblock: €Ð [ 921.172470] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 49424)! [ 921.242001] EXT4-fs (loop3): group descriptors corrupted! [ 921.279055] Bluetooth: Invalid header checksum [ 921.286943] Bluetooth: Invalid header checksum [ 921.309495] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:45:15 executing program 0: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000080)=0x5) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="10514f41291284113f37d6"], 0xb) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=r0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, r0}, 0x10) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000540)=ANY=[@ANYRES32=r0, @ANYBLOB="ff011600ff12bd71eb276e1bc800e0ff73cbf9f6e6ad629b7cf59a64d92bf51b34f2b19853cd9b5968c6139ce84b0ea80c3cdf20f93ec3a2db43ebc7fc3406237f2e09a95d15427a6e366c36d257af789177acb55990609bd6408963680c50d9bfbb06b1247fbf885325fa35e92cc1549755bb170f528cbd499e6c6b2f7a21291453bf6de7f078df62ce3405613970602e1288a64f08a8025ca2965d93ddef7ce74679f51707b3f4afac2afd6bc9062d0ea1f746a4fe1aba4825a1acc140db740bbbbf8c9c5b9c14a607f7"], &(0x7f00000000c0)=0x14) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r1) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3, 0xfffffffd}, 0x3c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x2, 0x201, 0x1, 0xfee6}, 0x40) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.swap.current\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r3) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x127) sendmsg$tipc(r4, &(0x7f0000000500)={&(0x7f0000000280)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x0, 0xc}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000001580)="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", 0xffe0}], 0x1, 0x0, 0x0, 0xa000a0}, 0x4000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000005080)={0xffffffffffffffff, 0xc0, &(0x7f0000004fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004e80)=0x1ff, 0x0, 0x0, 0x0, &(0x7f0000004ec0)={0x6, 0x2}, 0x0, 0x0, &(0x7f0000004f00)={0x1, 0xf, 0x7, 0x9}, &(0x7f0000004f40)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004f80)=0x1769}}, 0x10) gettid() socket$kcm(0xa, 0x0, 0x11) 17:45:15 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r6 = socket(0xa, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(r6, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x48}}, 0x0) 17:45:16 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5427, &(0x7f0000000080)=0xffffffc0) [ 921.709714] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:45:18 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f", 0x1}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES32, @ANYPTR64, @ANYRESHEX, @ANYBLOB="66bd153d9fca1f3d4ada8d641bd79bfc8d335a6cb07aba4492632ecf507ea5d58ff571fc0ea2005c2477a68b56286de7f6c39a20c4a03b0c12717f48e1c462ad12892885fb00598926e239e47a64d134e0856ec4babf8a91f13855c38d909045406c0d59e33fd28972bb492830f4e6ce007e6e91b0a5d7f8da81d7e4e6d84e0818cd9ef6aea2c58c2da5ba2053a5d31861b8c39d8e331fce650c08d036bc9abb8365d87261a5fa5ede2c15ba5066d6"], 0x0, 0xcd}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x4}, {&(0x7f0000000000)=""/6, 0xffffffffffffff2c}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:45:18 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1}, 0x80) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000015980)={0x0, 0x0, 0x0}, 0x0) gettid() openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open$cgroup(&(0x7f0000000400)={0x5, 0x70, 0x7, 0x1f, 0x4, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfff, 0x2, @perf_config_ext={0x1}, 0x40402, 0x5, 0x0, 0x6, 0x8, 0x0, 0x2}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x8) r2 = getpid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x201, 0x0, @perf_bp={0x0}, 0x0, 0x100000000, 0x0, 0x0, 0x9df, 0x8}, r2, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000240)={0x4, 0x70, 0x40, 0x80, 0x2, 0xed, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x41000, 0x4, 0x0, 0x0, 0xfffffffffffffffd, 0x582d, 0x4}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x9) perf_event_open$cgroup(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x4, 0x0, 0xff, 0x0, 0x0, 0x12040, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0xe}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80000001}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000000100)=""/107, &(0x7f0000000340)=0x6b) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xb, &(0x7f00000000c0)=0x2aa, 0x4) ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0xe43) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) 17:45:18 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @multicast1}}, 0x20) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="10514f41291284113f37d6"], 0xb) r3 = socket(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x40, &(0x7f0000000700)=ANY=[@ANYBLOB="bf16000000000000b70700000100e7ff4070000000000000cf7000000000000095000000000000007c4177656e9d8a25754986b2841fb71916254466b3b65025359ebaaa298793411c22f901fb70fc5b4e982661d68b61c1ba6e53657b8dc7c5bb72290946131bc6e7fae8bc5e5c45d8cfc8c575b46e55b9b5b14dc6de58bb048d2e9ec9b5d29ab9e06bdb414497312320fd387df6ed006f2cc51cc11505e90fbda600000000004e6ac6eb534811d7e05c8a0e23b8c84db9602358af9ffb55864888a2410845cfb4ad8104d8e46841aef9cbd66a8369cc448c32cbc0554050995d2701ed149472fcb5ce735fe57b4c10dacf5d3766f10254130bf6d81cbe676a4b0b74efe6e20e94bf0c6fb169950900000082e44162085fe742807e212826c70fbc0492e0bd8c08398269936a4663f281d2d433882837ca5ae50787582689e24c872d0000000000000000000000000000d7a8463d79d793f1c9ebecd285fae1f72c9e7d59ca5f9123d6092b30902b4b143d1ec9b62e21d8d62fb989ac8fa119b3d8650c2e9d81ad7d7cf91f5af32cc416029ce20e434b1c0400a4339cc02780894ed91e703d4ded0ca2e748cdcfecd41b2f82bb44a02731cf30a738c09166de5f65af363854e725c867bd3cea4431ef5913a51296c1774a3f803f024a39ab7a6386fa7d63fe3849f5790fa1418b39fcae124263def2bcd3bf3971a873fc3f687740a17d8f"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000000)=r5, 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r6, 0x2}, 0xffffff7c}}, 0x4) sendmsg$NL80211_CMD_START_SCHED_SCAN(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r6, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x240448c0) prctl$PR_GET_FP_MODE(0x2e) close(r1) r7 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r1, r7, 0x0, 0x200fff) getsockopt$EBT_SO_GET_INIT_INFO(r7, 0x0, 0x82, &(0x7f0000000040)={'filter\x00'}, &(0x7f00000000c0)=0x78) 17:45:18 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r6 = socket(0xa, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(r6, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x48}}, 0x0) 17:45:18 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5428, &(0x7f0000000080)=0xffffffc0) 17:45:18 executing program 0: r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x8010, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13802, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x400000000000}, 0x0, 0x101, 0x0, 0x3, 0x8d}, 0x0, 0xb, 0xffffffffffffffff, 0x8) shmctl$SHM_INFO(0x0, 0xe, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000100)={{0x1, 0x2, 0x6d0, 0x2, 0xd4a4}, 0x7fff}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) socket$kcm(0x29, 0x2, 0x0) fcntl$setstatus(r1, 0x4, 0x6900) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x1000f3) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003200)=[{{&(0x7f00000012c0), 0x10, 0x0}}], 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x40) ftruncate(r1, 0x8200) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf, 0x80, 0x4, 0xa12d, 0x100002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) getresuid(&(0x7f0000004180), 0x0, 0x0) [ 923.907707] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.3'. [ 923.913053] kauditd_printk_skb: 8 callbacks suppressed [ 923.913068] audit: type=1800 audit(1586540718.334:4858): pid=26203 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=16321 res=0 [ 923.962509] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 924.059328] audit: type=1800 audit(1586540718.484:4859): pid=26210 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16433 res=0 [ 924.157813] bridge0: port 2(bridge_slave_1) entered disabled state [ 924.167451] bridge0: port 1(bridge_slave_0) entered disabled state [ 924.177403] audit: type=1800 audit(1586540718.614:4860): pid=26222 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16433 res=0 17:45:18 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5437, &(0x7f0000000080)=0xffffffc0) [ 924.220615] device bridge0 entered promiscuous mode 17:45:18 executing program 0: sysinfo(0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(r0, 0x7) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ptrace(0x10, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setuid(0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b0", 0x27, 0x11, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000000), &(0x7f0000000040)=0x4) close(r2) [ 924.498933] Bluetooth: Invalid header checksum [ 924.503852] audit: type=1800 audit(1586540718.934:4861): pid=26236 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16401 res=0 [ 924.608049] audit: type=1800 audit(1586540719.014:4862): pid=26215 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=16321 res=0 17:45:19 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5441, &(0x7f0000000080)=0xffffffc0) [ 924.735538] audit: type=1800 audit(1586540719.104:4863): pid=26239 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16401 res=0 [ 924.947861] audit: type=1800 audit(1586540719.374:4864): pid=26247 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16401 res=0 [ 925.122857] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.3'. [ 925.143356] bridge0: port 2(bridge_slave_1) entered blocking state [ 925.149952] bridge0: port 2(bridge_slave_1) entered forwarding state [ 925.156756] bridge0: port 1(bridge_slave_0) entered blocking state [ 925.163909] bridge0: port 1(bridge_slave_0) entered forwarding state 17:45:19 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="10514f41291284113f37d6"], 0xb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x0, @time={0x5, 0x1}, 0xc1, {0xbc}, 0x0, 0x1, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @multicast1}}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x46, &(0x7f0000000080)=0x400000, 0x4) 17:45:19 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r5 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(r5, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x48}}, 0x0) [ 925.171268] audit: type=1800 audit(1586540719.574:4865): pid=26250 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16401 res=0 [ 925.233683] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready 17:45:19 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5437, &(0x7f0000000080)=0xffffffc0) [ 925.387646] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 925.509725] audit: type=1800 audit(1586540719.944:4866): pid=26264 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=16033 res=0 [ 926.128527] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 17:45:21 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f", 0x1}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES32, @ANYPTR64, @ANYRESHEX, @ANYBLOB="66bd153d9fca1f3d4ada8d641bd79bfc8d335a6cb07aba4492632ecf507ea5d58ff571fc0ea2005c2477a68b56286de7f6c39a20c4a03b0c12717f48e1c462ad12892885fb00598926e239e47a64d134e0856ec4babf8a91f13855c38d909045406c0d59e33fd28972bb492830f4e6ce007e6e91b0a5d7f8da81d7e4e6d84e0818cd9ef6aea2c58c2da5ba2053a5d31861b8c39d8e331fce650c08d036bc9abb8365d87261a5fa5ede2c15ba5066d6"], 0x0, 0xcd}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x4}, {&(0x7f0000000000)=""/6, 0xffffffffffffff2c}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:45:21 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5450, &(0x7f0000000080)=0xffffffc0) 17:45:21 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11d000}) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000805, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = dup3(r1, r2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet(r3, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r2, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) r5 = socket$inet6(0xa, 0x400000000001, 0x0) close(r5) r6 = open(&(0x7f0000002000)='./bus\x00', 0xc6142, 0x0) sendfile(r5, r6, 0x0, 0x200fff) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000100)={0xc6, 0x9, 0x4, 0x4, 0x5f, {}, {0x1, 0x2, 0x4, 0x3f, 0x8, 0x9, "9ebbf399"}, 0x8, 0x1, @planes=&(0x7f00000000c0)={0x5, 0x4007, @userptr=0x200, 0x81}, 0x20, 0x0, r6}) write$FUSE_WRITE(r7, &(0x7f0000000180)={0x18, 0x0, 0x4, {0x4}}, 0x18) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x6c, &(0x7f000059aff8)={r4}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={r4, 0x63}, 0x0) 17:45:21 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @multicast1}}, 0x20) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r1, r2, 0x0, 0x200fff) write$P9_RLOPEN(r2, &(0x7f0000000040)={0x18, 0xd, 0x2, {{0x2, 0x3, 0x8}, 0x6}}, 0x18) 17:45:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x48000}, 0x2004cc80) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xfffffffffffffecb) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0233"], 0x48}}, 0x0) r6 = socket$inet6(0xa, 0x400000000001, 0x0) close(r6) r7 = open(&(0x7f0000000100)='./bus\x00', 0xc4042, 0x0) sendfile(r6, r7, 0x0, 0x200fff) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000000c0)=ANY=[@ANYRESHEX, @ANYRES32=r3, @ANYPTR64=&(0x7f0000000380)=ANY=[]], @ANYRES32=r5, @ANYRESDEC], 0x3}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl(r8, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000002c00270d000000000000000000020000", @ANYRES32=r5, @ANYBLOB="0200000000000000f1ff00000b0001006367726f757000000400020008000b00e5cb0000"], 0x3c}}, 0x0) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r9, &(0x7f0000ffc000/0x2000)=nil, 0x5000) shmctl$SHM_LOCK(r9, 0xb) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@bridge_dellink={0x78, 0x11, 0x0, 0x70bd2d, 0x25dfdbff, {0x7, 0x0, 0x0, 0x0, 0x20800, 0x2}, [@IFLA_GROUP={0x8, 0x1b, 0x4f56}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x3}, @IFLA_PHYS_PORT_ID={0x18, 0x22, "231bdba9d4f0ef9fdb0c218323800a013759ca38"}, @IFLA_PHYS_SWITCH_ID={0x17, 0x24, "25e5bc05f6cccba511f9b13c6e369811c2c5ce"}, @IFLA_MTU={0x8, 0x4, 0x7fff}, @IFLA_PHYS_SWITCH_ID={0x0, 0x24, "de5df9c5ae068ec7fc"}]}, 0x78}}, 0x0) 17:45:21 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r5 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(r5, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x48}}, 0x0) [ 927.026523] device veth8 entered promiscuous mode [ 927.072290] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 927.080261] audit: type=1800 audit(1586540721.504:4867): pid=26293 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=16689 res=0 [ 927.120775] Bluetooth: Invalid header checksum [ 927.125689] Bluetooth: Invalid header checksum [ 927.262845] device veth10 entered promiscuous mode 17:45:21 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/schedstat\x00', 0x0, 0x0) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000200)=0x5, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @multicast1}}, 0x20) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="10514f41291284113f3740d6"], 0xb) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsa\x00', 0x321480, 0x0) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x2010, r3, 0x0) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ocfs2_control\x00', 0x0, 0x0) setsockopt$CAIFSO_REQ_PARAM(r4, 0x116, 0x80, &(0x7f0000000040)="027fe94d6f57a60aac7c19d8177caef702f6a01c87761d15830740d10fb2d70428d9e2c506ceaeef78fae6eb90f37dfdb909fbe1117830c5388dcfa26f1b3ebda2586a5027f3506c4a18c2a9a37091fbdf939e770f71e1cb7f1b64979295dfcd1eda99824af5358be0b58f974cbd4ac9c7638305a3d3e9e474e09e44fec5a277933deaac3febadf037c8c1115d6cf00d652932ebe9361c83b23de6b5d42a3e8f8411ca487492af5e", 0xa8) 17:45:21 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5451, &(0x7f0000000080)=0xffffffc0) 17:45:21 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r5 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(r5, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x48}}, 0x0) 17:45:21 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32=r2, @ANYBLOB="0000ddffe60000fd1c00"/20], 0x3c}}, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x208200) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x10, 0x3f5, 0x200, 0x70bd2b, 0x25dfdbfb, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010) getsockname$packet(r3, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000280)=0x14) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc020660b, &(0x7f00000005c0)={0x53, 0xfffffffe, 0x0, 0x40000, [0x8048004, 0x8128007, 0x0, 0x2, 0x300, 0x5000000], [{0x200, 0x1, 0x0, 0x0, 0x7fff}, {0x22000, 0x0, 0x0, 0x0, 0xbd, 0x6}]}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$TIOCGDEV(r6, 0x80045432, &(0x7f0000000580)) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000480)=0x4, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gre={{0x8, 0x1, 'gre\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IFLAGS={0x6}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x5}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) [ 927.469859] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:45:22 executing program 0: ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000100)={0x0, 0x3, 0x0, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}}) [ 927.570768] Bluetooth: Invalid header checksum [ 927.575454] Bluetooth: Invalid header checksum [ 927.606944] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1013 sclass=netlink_route_socket pig=26334 comm=syz-executor.3 17:45:22 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @multicast1}, 0x0, 0x1}, 0x20) [ 927.811191] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1013 sclass=netlink_route_socket pig=26328 comm=syz-executor.3 17:45:24 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) ftruncate(0xffffffffffffffff, 0x81) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="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"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r3, @ANYBLOB="0b8c0c4bdca72e0ba08921f31278dfd998eb2e259a944e302bae3c84bcceb99b568dd09d58065d21983d5656e9a25b86a09e47ea78f9007e9a0433f702a9942783ba8bb962ef47e8af3d90c8f4f4d381de06e7"], 0x3c}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r5, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r5, &(0x7f0000000400)=ANY=[@ANYBLOB="10514f41291284113f37d6"], 0xb) ioctl$EXT4_IOC_SWAP_BOOT(r5, 0x6611) r6 = socket$inet6(0xa, 0x400000000001, 0x0) close(r6) r7 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r6, r7, 0x0, 0x200fff) getsockopt$inet6_dccp_buf(r6, 0x21, 0x2, &(0x7f0000000640)=""/212, &(0x7f0000000080)=0xd4) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) 17:45:24 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f", 0x1}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES32, @ANYPTR64, @ANYRESHEX, @ANYBLOB="66bd153d9fca1f3d4ada8d641bd79bfc8d335a6cb07aba4492632ecf507ea5d58ff571fc0ea2005c2477a68b56286de7f6c39a20c4a03b0c12717f48e1c462ad12892885fb00598926e239e47a64d134e0856ec4babf8a91f13855c38d909045406c0d59e33fd28972bb492830f4e6ce007e6e91b0a5d7f8da81d7e4e6d84e0818cd9ef6aea2c58c2da5ba2053a5d31861b8c39d8e331fce650c08d036bc9abb8365d87261a5fa5ede2c15ba5066d6"], 0x0, 0xcd}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x4}, {&(0x7f0000000000)=""/6, 0xffffffffffffff2c}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:45:24 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5452, &(0x7f0000000080)=0xffffffc0) 17:45:24 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, 0x0, 0x0) setsockopt$inet_int(r6, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x48}}, 0x0) 17:45:24 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @multicast1}}, 0x20) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="10514f41291284113f37d6"], 0xb) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000040)={{0xa, 0x4e22, 0xec, @loopback, 0x3f}, {0xa, 0x4e23, 0x61, @empty, 0x5}, 0x6, [0xffffff01, 0x8000, 0x7f, 0xe, 0x401, 0x2, 0x69608b78, 0x5]}, 0x5c) 17:45:24 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 17:45:24 executing program 3: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ceph(&(0x7f0000000040)='ceph\x00', &(0x7f00000000c0)='./file0\x00', 0xfff, 0xa, &(0x7f0000001780)=[{&(0x7f0000000680)="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", 0x1000, 0x93ca}, {&(0x7f0000000240)="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", 0xff, 0xfffffffffffffff8}, {&(0x7f0000000100)="a27f0b649198ebe0a7fbc601754150ba7dc2d133a9ef6c48c8003f9f1c364d8ea12b1e21df06e6df3d9c2213334d3f3289be7fd4ad7f4015d40e68e51f5ce98351dd1b06382394dea8c5b27694c7b35a8e46826ae412b24af3ea542fbc899ff6", 0x60}, {&(0x7f0000000340)="71685412ba5478d865ddaf15f266a1190a815f52ddd3030c5469281fd78b05642c8cd6eef5b14962e28f1cfdb4867a33be138d8f31ccf1653449b15ad01edd8b99a1314ef115a1ca35de4dd3a20c551fb8231eeb34c38381723ccf0f88211f75309902145e483021c04df9dd369847a9e08f9bb50682393322b9af44b18406fb2c7651d15fac1b9646712c09e64c32e4b357009ffa35362d", 0x98, 0xfff}, {&(0x7f0000000400)="9d9d6da77d3f1e48b87ae7c88e46abff3860ba411e9b72e6c886991bfedbd1dadc39b68953bd46a6df4b2dbaedf47b8d5eb1da47831eb6f067f63f69ad1841c1b51c432fc0be20a19505f4cebf7b019486b9eb497eb505621c0a05b575474fba337fa35a8f07668084bc5f214b7446c314058dbb593525f208fe1fa5ee76c40534ccdb7d95df56aac7832c8761ec40cf2b", 0x91, 0x100000000}, {&(0x7f00000004c0)="3a16e253e6397c21057768dacb315d4f4972bf3c824d622683aca0adf6d71c1b51fa3f4f51f1b4bffaa14a223b588140d7d4c8985a6764864dae3915d164a87da581346429de08b0df5c1a2d2b8e20b7a7f8748620e5d5c90072930c6c119e68fd3d11eeeef4cee2b55536", 0x6b, 0x8000}, {&(0x7f0000000540)="2a28696a495f49d29c652000d920280492e5b94562813d6fedeb93f1a686f1a2c969760c56edc0411084dc0b5bf6eb5718859febb61744e1712e92279fcf7aee48d460966d51e4781fc321a16a8567aa5ba98f4dbb618ace708224ed3eaea5e28f18ba731ec090dc9607aca2de3f27315483603718c1089868aeb188d2cd252e8b98139db1fada7e62a887e38964aaf6cae994de4d7ea1e41f04f7c6d51e28959dd923d051c10007d0f26c89da270358adeaa274e1d8247812d486310db89c595ad251079ccea45676a480a11862d92cc5e73e527bfef79bf76181a5322cfc67223c6c98e2ac4d7f61743f7b88c6d6001fc21724bb1614", 0xf7, 0x4}, {&(0x7f0000001680)="9231a71113ba1779d9b8", 0xa, 0x81}, {&(0x7f00000016c0)="c32b7dc8918f6a93e95efe367268d2e521806f4ce4bb7092a79ad8a32b8cedce40bb476b020957", 0x27, 0xffffffffffffffff}, {&(0x7f0000001700)="853ee5ec4e71c4c5f906fea040527fe571ce3eea9102c0d73d0869f8cc13aa9409498ed9fcfdb43809be093c8976bc6c5271fc727dd6827553d95dcc34a2beb2343b7f9ce0be89cfa4f0f17fe667f041b557cc72b8fa20f8ad7bb149e0ab8a51a27f27cb34a6473c0ffc7c4b66784fd1", 0x70, 0x3}], 0x1000, &(0x7f0000001880)='mime_typesystem\x00') sendmsg$nl_route(r1, 0x0, 0x0) dup2(r1, 0xffffffffffffffff) ioctl$TCGETA(r0, 0x5405, &(0x7f00000018c0)) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000000)={{r0}, 0x40, 0x422, 0x2}) mount$fuse(0x0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000001900)=ANY=[@ANYBLOB="66643dc36d4d3bccbbbc157fe2a09f5d710f4a8619b0bfc389ee4802594e82e99bd15bc30a355f66b06c4b5ae4235cd10e5b619b14109a999a772d55c4cc8b4a782b01a661cf3b6704806bd791b1eed260cb6612e7feb35f42d117b1add3a40abcbaff0f756827eaae23049716c4da523b941b926a", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) [ 930.175413] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 930.320385] kauditd_printk_skb: 9 callbacks suppressed [ 930.320399] audit: type=1800 audit(1586540724.754:4877): pid=26392 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=17009 res=0 [ 930.350730] Bluetooth: Invalid header checksum [ 930.355726] Bluetooth: Invalid header checksum [ 930.381498] device bond6 entered promiscuous mode 17:45:24 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="10514f41291284113f37d6"], 0xb) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000040)={@empty, 0x101, 0x2, 0x3, 0xf, 0xffff, 0x5}, 0x20) [ 930.429366] audit: type=1800 audit(1586540724.794:4878): pid=26374 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16801 res=0 [ 930.460725] bond6: making interface bridge7 the new active one [ 930.502736] device bridge7 entered promiscuous mode 17:45:25 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3800000024006d7f528e00000000000000000058", @ANYRES32, @ANYBLOB="00000000ffffffff"], 0x3}}, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="10514f41291284113f37d6"], 0xb) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f00000001c0)=""/148, 0x101000, 0x400, 0x4}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00%'], 0x1}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x101000000, 0x0) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f0000000040)) 17:45:25 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x545d, &(0x7f0000000080)=0xffffffc0) [ 930.525278] audit: type=1800 audit(1586540724.954:4879): pid=26414 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16801 res=0 [ 930.557489] bond6: Enslaving bridge7 as an active interface with an up link [ 930.615626] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:45:25 executing program 5: socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) lsetxattr$security_selinux(&(0x7f0000000140)='./bus\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f0000000200)='system_u:object_r:tmpfs_t:s0\x00', 0x1d, 0x1) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r2, 0x40480923, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0}) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="10a928a318ad5a202083d1ee37d6"], 0xb) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r3, r4, 0x0, 0x200fff) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000080)={0x7, 0x1, 0x4, 0x2000000, 0x200, {0x77359400}, {0x4, 0xc, 0x4, 0x7, 0xdb, 0x31, "e8880f77"}, 0x1ff, 0x1, @fd=r4, 0x3, 0x0, 0xffffffffffffffff}) setsockopt$sock_timeval(r5, 0x1, 0x14, &(0x7f0000000100)={0x0, 0x7530}, 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x20) r6 = socket$inet6(0xa, 0x400000000001, 0x0) close(r6) r7 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r6, r7, 0x0, 0x200fff) [ 930.821496] bond6: Enslaving bridge8 as an active interface with a down link [ 930.875217] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 930.907738] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=26442 comm=syz-executor.3 17:45:25 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, 0x0, 0x0) setsockopt$inet_int(r6, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x48}}, 0x0) [ 930.922073] Bluetooth: Invalid header checksum [ 930.922132] Bluetooth: Invalid header checksum [ 930.933100] audit: type=1800 audit(1586540725.364:4880): pid=26451 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16993 res=0 [ 930.962072] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 931.000429] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=26442 comm=syz-executor.3 [ 931.025088] audit: type=1800 audit(1586540725.454:4881): pid=26449 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=17090 res=0 [ 931.041476] bond6: Enslaving bridge9 as an active interface with a down link [ 931.065013] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=26442 comm=syz-executor.3 [ 931.127322] audit: type=1800 audit(1586540725.454:4882): pid=26419 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=17009 res=0 [ 931.140949] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=26442 comm=syz-executor.3 [ 931.232771] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=26442 comm=syz-executor.3 17:45:25 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5460, &(0x7f0000000080)=0xffffffc0) [ 931.276481] audit: type=1800 audit(1586540725.544:4883): pid=26457 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=17090 res=0 [ 931.281594] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 931.336502] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=26442 comm=syz-executor.3 [ 931.413264] audit: type=1800 audit(1586540725.644:4884): pid=26460 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16993 res=0 [ 931.430139] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=26442 comm=syz-executor.3 [ 931.498031] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=26442 comm=syz-executor.3 [ 931.573176] audit: type=1800 audit(1586540726.004:4885): pid=26449 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=17090 res=0 [ 931.579897] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 931.602513] Bluetooth: Invalid header checksum [ 931.609955] Bluetooth: Invalid header checksum [ 931.653471] audit: type=1800 audit(1586540726.004:4886): pid=26457 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=17090 res=0 17:45:27 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x4}, {&(0x7f0000000000)=""/6, 0xffffffffffffff2c}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:45:27 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="10514f41291284113f37d6"], 0xb) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) dup2(r1, 0xffffffffffffffff) tee(r1, r0, 0x7, 0x1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=r2, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, r2}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000100)={r2, @in6={{0xa, 0x4e23, 0x3, @mcast1, 0x293}}, [0x5, 0x3, 0xffff, 0x1, 0x8f, 0x4, 0x7, 0x7fff, 0x1, 0x2, 0x3d, 0x3, 0x3ff, 0x3, 0x9]}, &(0x7f0000000000)=0x100) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=r3, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, r3}, 0x10) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000080)=r3, 0x4) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0xfffc, 0x0, 0xb3550aa4ba878254}, 0x9c) 17:45:27 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, 0x0, 0x0) setsockopt$inet_int(r6, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x48}}, 0x0) 17:45:27 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="10514f41291284113f37d6"], 0xb) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=r1, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, r1}, 0x10) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000040)={r1, 0x2}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000000c0)={r2, 0x3, 0x6}, &(0x7f0000000100)=0x8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @multicast1}}, 0x20) 17:45:27 executing program 3: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x8, 0x0, 0x0, 0x1, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$tipc(0x1e, 0x5, 0x0) io_submit(0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) unshare(0x40000000) 17:45:27 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x40049409, &(0x7f0000000080)=0xffffffc0) [ 933.295169] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 933.409179] IPVS: ftp: loaded support on port[0] = 21 [ 933.449142] Bluetooth: Invalid header checksum [ 933.461131] Bluetooth: Invalid header checksum 17:45:28 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000), 0x4) setsockopt$inet_int(r6, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x48}}, 0x0) 17:45:28 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46001f3f078a2e00000000000002003e000d09000083000000000000004000000000000000a10000000000000006000000ff7f380002000700c40029b0060000000700000003000000000000000400000000000000f9ffffffffffffff01000000000000000600000000000000200000000000000006000000018000004fb5000000000000ff07000000000000e8090000000000000100010000000000ff7f0000000000000101000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000900"/944], 0x3b0) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000400)="2f961e5fdc11ca4b92891ef0509ed76369e491d5c5c183203aacb91fee13615dc1523eb03806", 0x26) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @multicast1}}, 0x20) 17:45:28 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x40086602, &(0x7f0000000080)=0xffffffc0) [ 933.908658] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 933.961887] Bluetooth: Invalid header checksum [ 933.967092] Bluetooth: Invalid header checksum 17:45:28 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001180)={&(0x7f0000000040)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/63, 0x3f}, {&(0x7f0000000100)}], 0x2, &(0x7f0000000180)=""/4096, 0x1000}, 0x40000000) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r1, r2, 0x0, 0x200fff) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000011c0)={0x924, 0x1, 0x4, 0x1000, 0x3, {0x0, 0x7530}, {0x3, 0x1, 0x1f, 0x1f, 0x2f, 0x7, "d32ba582"}, 0x2ca, 0x2, @userptr=0xfffffffffffffffb, 0x424, 0x0, r0}) r4 = socket(0x10, 0x0, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r6 = add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f00000000c0), 0x0, r6) keyctl$get_persistent(0x16, r5, r6) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001240)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x24}}, 0x4e22, 0x0, 0x4e20, 0x3, 0xa, 0x80, 0x60, 0x2b, 0x0, r5}, {0x7, 0x8, 0x0, 0xffffffff80000000, 0x7fffffff, 0x3, 0x5, 0x3}, {0x10001, 0x62, 0xffffffffffffff26, 0xcf0000000000}, 0x401, 0x0, 0x2, 0x1, 0x0, 0x1}, {{@in=@rand_addr=0x7ff, 0x4d5, 0x6c}, 0xa, @in6=@rand_addr="dbd54f1289684811e21acd31556354cf", 0x3504, 0x3, 0x3, 0x7f, 0xf98, 0x3, 0x5}}, 0xe8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @multicast1}, 0x0, 0x2, 0x0, 0x9, 0x0, 0xffff}, 0x20) 17:45:28 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x40087602, &(0x7f0000000080)=0xffffffc0) 17:45:28 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000), 0x4) setsockopt$inet_int(r6, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x48}}, 0x0) [ 934.410856] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 934.469034] Bluetooth: Invalid header checksum [ 934.473902] Bluetooth: Invalid header checksum 17:45:30 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x4}, {&(0x7f0000000000)=""/6, 0xffffffffffffff2c}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:45:30 executing program 0: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000), 0x4) setsockopt$inet_int(r6, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x48}}, 0x0) 17:45:30 executing program 3: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x8, 0x0, 0x0, 0x1, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$tipc(0x1e, 0x5, 0x0) io_submit(0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) unshare(0x40000000) 17:45:30 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @multicast1}}, 0x20) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="10905c9fb1b935a51937d6"], 0xb) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x284, 0x7, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x250, 0x4, 0x0, 0x1, [{0x1d0, 0x1, 0x0, 0x1, [@socket={{0xb, 0x1, 'socket\x00'}, @void}, @target={{0xb, 0x1, 'target\x00'}, @val={0xb8, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x4c, 0x3, "c734eb631bbf2580e405ab3087c183f3271fe138d19bb963d847669023b69b3542d6d20da7ea5e7eabb53e86c9d6fa45d99c4cffddc5bf09b1c29d8be9f371ef57f1aafe1eb53014"}, @NFTA_TARGET_NAME={0x10, 0x1, '{!cgroup{.^\x00'}, @NFTA_TARGET_NAME={0xd, 0x1, 'vboxnet0\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_NAME={0x21, 0x1, '/-.$proc}&}em1!eth1&keyring*\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x7fff}, @NFTA_TARGET_NAME={0x11, 0x1, 'vmnet1,{eth1\x00'}]}}, @osf={{0x8, 0x1, 'osf\x00'}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_OSF_TTL={0x5, 0x2, 0xff}]}}, @quota={{0xa, 0x1, 'quota\x00'}, @val={0x68, 0x2, 0x0, 0x1, [@NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x8}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x6}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0xfffffffffffffc00}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x100000000}]}}, @numgen={{0xb, 0x1, 'numgen\x00'}, @void}, @connlimit={{0xe, 0x1, 'connlimit\x00'}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffffff8}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x2}]}}, @dynset={{0xb, 0x1, 'dynset\x00'}, @void}]}, {0x3c, 0x1, 0x0, 0x1, [@masq={{0x9, 0x1, 'masq\x00'}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_MASQ_FLAGS={0x8}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x17}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x3}]}}]}, {0x40, 0x1, 0x0, 0x1, [@fib={{0x8, 0x1, 'fib\x00'}, @void}, @log={{0x8, 0x1, 'log\x00'}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x8000}, @NFTA_LOG_PREFIX={0x5, 0x2, 0x1, 0x0, '\x00'}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x35}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0xc4}]}}]}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x284}, 0x1, 0x0, 0x0, 0x14}, 0x20) 17:45:30 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x4020940d, &(0x7f0000000080)=0xffffffc0) 17:45:30 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000), 0x4) setsockopt$inet_int(r6, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x48}}, 0x0) [ 936.360820] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 936.459307] Bluetooth: Invalid header checksum [ 936.464714] Bluetooth: Invalid header checksum [ 936.476222] kauditd_printk_skb: 10 callbacks suppressed [ 936.476236] audit: type=1800 audit(1586540730.904:4897): pid=26591 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=17109 res=0 17:45:31 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @multicast1}}, 0x20) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x4000, 0x0) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f0000000080)) [ 936.558656] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 936.584736] IPVS: ftp: loaded support on port[0] = 21 [ 936.649151] audit: type=1800 audit(1586540731.084:4898): pid=26596 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=17109 res=0 17:45:31 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x80045432, &(0x7f0000000080)=0xffffffc0) 17:45:31 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x48}}, 0x0) 17:45:31 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x400, 0x0) fcntl$getown(r1, 0x9) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @multicast1}}, 0x20) [ 936.956539] audit: type=1800 audit(1586540731.384:4899): pid=26611 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15824 res=0 [ 937.077779] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:45:31 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @ipv4={[], [], @local}, 0x3}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000100)=0x2e4, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r2, 0xc0884123, &(0x7f0000000440)={0x1, "c951198f6497575c1c3db47bdbf6c9049141677daddd278ba5740a253376ae10088f2026e5a6adc29fc0c1e89a6d17e4723c201cf0ee5440f34a5eac5a61c486", {0x5, 0x2}}) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r3, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="b2020400"], 0xb) write$P9_ROPEN(r3, &(0x7f0000000200)={0x18, 0x71, 0x1, {{0x2, 0x2, 0x4}, 0x16c}}, 0x18) r4 = accept4(r1, &(0x7f0000000140)=@l2tp={0x2, 0x0, @broadcast}, &(0x7f00000000c0)=0x80, 0x800) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f00000001c0)=@req3={0x7, 0x43, 0x1, 0x1dd, 0xfffffff7, 0x101, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e20, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x400300, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9120cab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fb38", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0), 0x80fe}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x4000000) [ 937.134111] audit: type=1800 audit(1586540731.494:4900): pid=26611 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15824 res=0 17:45:31 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x80045440, &(0x7f0000000080)=0xffffffc0) [ 937.440152] audit: type=1800 audit(1586540731.874:4901): pid=26638 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=17104 res=0 [ 937.580996] audit: type=1800 audit(1586540732.014:4902): pid=26655 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=17104 res=0 17:45:33 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x4}, {&(0x7f0000000000)=""/6, 0xffffffffffffff2c}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:45:33 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x48}}, 0x0) 17:45:33 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @multicast1}}, 0x20) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00'/11], 0xb) ioctl$TCSETXW(r1, 0x5435, &(0x7f0000000040)={0x4, 0xe1, [0x1fa9, 0x1f, 0x6, 0x8001, 0x8], 0x100}) 17:45:33 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps_rollup\x00') exit(0x5) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="10514f41291284113f37d6"], 0xb) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000000), 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 17:45:33 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x80086601, &(0x7f0000000080)=0xffffffc0) 17:45:33 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="10514f41291284117e37d6ef9fa7fdc395330865a948b897c874f984f3dcd4a3652543f4c96ee2da511b1eeadb19687df3ebb3f2a1750e3d0d01705279d29e930bf18310bd110f8fd43f68"], 0xb) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) accept4(r4, 0x0, 0x0, 0x80000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) dup2(r1, r0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000940)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0xfffffced) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$sock(r6, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="7d35a1f98a4540f36f59a40a04718492ab284155b1d8c25bd60bf92136faea95", 0x20}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r6, 0x8982, &(0x7f0000000000)={0x1, 'vlan0\x00', {}, 0x7ff}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)}, 0x0) recvmmsg(r0, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x0, 0x0) [ 939.458045] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 939.470006] audit: type=1800 audit(1586540733.904:4903): pid=26671 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=17106 res=0 [ 939.571875] audit: type=1800 audit(1586540733.974:4904): pid=26679 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=17111 res=0 17:45:34 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x844}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000440)='cgroup2\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x0) mount$9p_unix(0x0, 0x0, &(0x7f0000000100)='9p\x00', 0x0, 0x0) pipe(0x0) socket$inet_udplite(0x2, 0x2, 0x88) semctl$SEM_INFO(0x0, 0x0, 0x13, &(0x7f0000000040)=""/51) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f00000004c0)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@x25={0x9, @remote={[], 0x1}}, 0x80, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="200000000000000006000000000000000000"], 0x12}, 0x20000000) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000001a00)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302ed8a60ab5632dbb78abd56f94fe58312cbb803a8ecc54a25fba3da80b856445ab10062105000000c08dc5404737796d507031dbb24a6582d5856b2586cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f137cc5a3fb54aff8eaf5b96790700000000000000ff39aec025e19066318515eff27eff000000000000000000e94ccb6ac7c7a3406807ea6e2f114b87bde2b723135e01"], 0xad) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x2a, &(0x7f0000000000)=ANY=[@ANYRES16], 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="74152a7e66486e733d66642c7266646e6f5cd3d64e5590537573a127dfdd5c7f17220471440fbf3c77d2a5080000009c09bcdeaaf330483d5d23da50deee8d8d7807d9cd2e65aba052cbaad9c3d9dd04754f499386a5ffff46e7e928a4c8175ac6a90fa441b989a3da60d256c13740deaebff2c363402ecb4acf77a7e9dd5328e7e6f26dae2162506db2320de1ffed4b3db77a9a3885f7afc3dd64f6cdc23ba67994bfe7e3d4e52c59b58ddc5a25de9318ab2a", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX]) rmdir(&(0x7f0000000340)='./file0//ile0\x00') 17:45:34 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x5000) r1 = shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x1000) shmdt(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @multicast1}}, 0x20) 17:45:34 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x48}}, 0x0) 17:45:34 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x80087601, &(0x7f0000000080)=0xffffffc0) [ 939.734667] audit: type=1800 audit(1586540734.044:4905): pid=26671 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=17106 res=0 17:45:34 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000040)={{0xa, 0x4e22, 0x1, @rand_addr="846789c3eb5f3b72fd6f9c431128477f"}, {0xa, 0x7, 0x7, @loopback, 0x8a5}, 0x0, [0x0, 0x7, 0x4, 0x80, 0x0, 0x101, 0x8, 0x1f]}, 0x5c) close(r1) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r3, r4, 0x0, 0x200fff) sendfile(r4, r2, 0x0, 0x200ffe) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f0000000000)={@rand_addr="c7000000000083b53aef5c303ac200", 0x0, 0x0, 0x0, 0x1}, 0x20) [ 939.877341] audit: type=1800 audit(1586540734.124:4906): pid=26679 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=17111 res=0 [ 939.901686] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 939.989176] Bluetooth: Invalid header checksum [ 939.994419] Bluetooth: Invalid header checksum 17:45:34 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @multicast1}}, 0x20) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6) 17:45:36 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x4}, {&(0x7f0000000000)=""/6, 0xffffffffffffff2c}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:45:36 executing program 0: syz_emit_ethernet(0x6e, &(0x7f0000001640)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd604e96e100382b0000000000000000000000000000000000fe8000000000000000000000000000aa3a0202010000000004009078000000006038ae7500000000fe80000000000000000000000000aafe8000000000000000000000000000aa00"], 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r0, r1, 0x0, 0x200fff) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r3, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="10514f41291284113f37d6"], 0xb) getsockopt$packet_buf(r3, 0x107, 0xd, &(0x7f0000000080)=""/50, &(0x7f00000000c0)=0x32) write$binfmt_aout(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="10514f41291284113f37d6"], 0xb) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000000)=r2) 17:45:36 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0xc0045878, &(0x7f0000000080)=0xffffffc0) 17:45:36 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x48}}, 0x0) 17:45:36 executing program 5: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @multicast1}}, 0x20) 17:45:36 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = fcntl$dupfd(r3, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r2) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="b3bbbbbbbbbbaaaaaaaaaaba8100000086dd"], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000180)={{0x3a, @multicast1, 0x4e20, 0x0, 'sed\x00', 0x0, 0x7fffffff, 0x12}, {@remote, 0x4e22, 0x3, 0x78d, 0x38, 0x40000004}}, 0x44) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x2, 0x2) splice(r0, 0x0, r2, 0x0, 0x10003, 0x0) 17:45:37 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x4}, {&(0x7f0000000000)=""/6, 0xffffffffffffff2c}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:45:37 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @multicast1}}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@rand_addr="a6dd136c391626478c072c957385198d", 0x4, 0x0, 0xff, 0x5, 0x80, 0x6}, 0x20) [ 942.632873] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 942.638429] kauditd_printk_skb: 6 callbacks suppressed [ 942.638442] audit: type=1800 audit(1586540737.064:4913): pid=26744 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15888 res=0 [ 942.730221] audit: type=1800 audit(1586540737.164:4914): pid=26744 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15888 res=0 [ 942.801214] audit: type=1800 audit(1586540737.204:4915): pid=26755 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15868 res=0 [ 942.837162] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable 17:45:37 executing program 3: syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, @source_quench={0x16, 0x0, 0x0, 0x2, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}, "e238d19c6ac2cdb8"}}}}}, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f00000000c0)={0x9e0000, 0x9, 0x7f, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x9a0911, 0x9, [], @value=0x3f}}) accept(r0, &(0x7f0000000100)=@can, &(0x7f0000000180)=0x80) [ 942.892330] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 942.923361] audit: type=1800 audit(1586540737.354:4916): pid=26755 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15868 res=0 17:45:37 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x48}}, 0x0) 17:45:37 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0xc0045878, &(0x7f0000000080)=0xffffffc0) 17:45:37 executing program 5: truncate(&(0x7f0000000040)='./file0\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="10514f412912847bc637d6"], 0xb) ioctl$PPPIOCGUNIT(r1, 0x80047456, &(0x7f0000000080)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @multicast1}}, 0x20) 17:45:37 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f00000000c0), 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, 0x0) r0 = socket(0x10, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r2 = add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f00000000c0), 0x0, r2) keyctl$get_persistent(0x16, r1, r2) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000200)='./file1\x00', 0x4, 0x1, &(0x7f0000000340)=[{&(0x7f0000000280)="1e4542c730c80575eea55af341895e003ff72291d388cd9618bb4e67463c816aa336b27d5427e6aae8d0a3c1ab8535924da8b5211040e7c4b40d998ea7bfe46adb7b49efc2c614f1ed61194f0c8e00051ea70d7d83a91a9ebf2a3134ddc7a6731f111c93b0e2ecf1ecfb9944e5302cbcd6acd5162a5e2629f5f6ce38e3cebe1b2dee74b14c6c189952b0caa1927cdb84df8aacbd5568e6d5aee7ea6fd0e9b108a34ffd70e4dabf624b41035664a328f21e2fef7f529cc31056a947b1bb0e8443", 0xc0, 0x8}], 0x2890400, &(0x7f0000000440)={[{@rodir='rodir'}, {@shortname_lower='shortname=lower'}, {@utf8='utf8=1'}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@shortname_winnt='shortname=winnt'}, {@rodir='rodir'}, {@nonumtail='nnonumtail=1'}, {@rodir='rodir'}], [{@smackfsroot={'smackfsroot', 0x3d, '/dev/vcsa\x00'}}, {@pcr={'pcr', 0x3d, 0x9}}, {@obj_role={'obj_role', 0x3d, 'upperdir'}}, {@uid_gt={'uid>'}}, {@subj_type={'subj_type', 0x3d, 'lowerdir'}}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@audit='audit'}, {@euid_lt={'euid<', r1}}, {@seclabel='seclabel'}, {@fscontext={'fscontext', 0x3d, 'user_u'}}]}) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r3, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="10514f41291284113f37d6"], 0xb) ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000040)=0x5) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0x80, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) 17:45:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001000000"], 0x3c}}, 0x0) close(0xffffffffffffffff) r5 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0x200fff) ioctl$TIOCL_SCROLLCONSOLE(r5, 0x541c, &(0x7f0000000340)) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r7, 0x533, 0x0, 0x0, {{}, {}, {0x9}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r7, 0x300, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x200000c0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}}, 0x0) [ 943.123822] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 943.206380] audit: type=1800 audit(1586540737.634:4917): pid=26776 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15879 res=0 [ 943.234253] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 17:45:37 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@mcast2}, 0x20) 17:45:37 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0xc0189436, &(0x7f0000000080)=0xffffffc0) [ 943.375928] audit: type=1800 audit(1586540737.684:4918): pid=26787 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15900 res=0 17:45:37 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x48}}, 0x0) [ 943.456495] bond7: enslaved VLAN challenged slave ipvlan2. Adding VLANs will be blocked as long as ipvlan2 is part of bond bond7 [ 943.522304] bond7: The slave device specified does not support setting the MAC address [ 943.533338] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 943.547254] audit: type=1800 audit(1586540737.754:4919): pid=26793 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15879 res=0 [ 943.595320] bond7: Setting fail_over_mac to active for active-backup mode [ 943.646164] overlayfs: filesystem on './file0' not supported as upperdir [ 943.658415] Bluetooth: Invalid header checksum [ 943.663493] Bluetooth: Invalid header checksum [ 943.669073] 8021q: adding VLAN 0 to HW filter on device ipvlan2 17:45:38 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x11c19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000007, 0x0, @perf_bp={0x0, 0x9}, 0x5b991ddc9cdf5b8a, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3}, 0x0, 0xd, r0, 0x1) gettid() perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000001280)=""/4096, 0x1000}], 0x1, 0x0) timer_create(0x8, &(0x7f00000001c0)={0x0, 0x3e, 0x4}, &(0x7f0000000040)) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="0721dcef00008000000002000000000003965f43c4a2fb6d50840620049dada720f897f650b0d13b730f001604aa6cf7f0c2208aee57ca1999dfc1743c7e7f8cf204341d459e6e29e80f5e3d21559ddc574d8d2e4752ea0c2842c3030000912c15a2fbb240cbb2027b515428529b23fe3048199ee8d61a51f58d4e7a4b5e0e3440b77bd3aafe0426867533e0e23258e59193c9764a3e10225c6f419048d99d3e238b057f000000a8d4c27489e7c1b0859773e979f5257d0d542c45b8e7a7d1b26175387ed81e1b2751754cdf726812a6c9191d7d1b000083801fd0963ac0775b4c387b83a683d0acb4619dab435d920e4cbebe2fd184e7a46a58f38ccf628d674a21d02a2b6065df5d951bb33f1fd541561d3017f12d6083902e32690800c6ab53f116389bc17cd6cbe012000001000000a6fd6240000000000000004e98af0362e88851c402ce4cb0e0560000fce2b0e6411df2faaa412189df3b3fdbd8ed66522f510300f0e258922dcf41dd93e4e09b185362c161ae85f27b3c8d536f4f8f383ae025783cc40421357cdd7f04c801000080000000004e3123b287aabd8c7563ca810f5c172e770e60c04e6c14565d7f89c88c87063fb18b71ae88a7dca1d09bda796b29097edc34254b45a3f7a5630f76308398fbf73da6dea604f27065f8e09d83fa6876bd026b374640dade04c5c3982ff2b2200895dd7afe956b4d8456e55a499fb107b5033bfa10f7590c8a7326a054c44a0d21b3a1cb5bf5b6639b8098c7beff896be745691d27026c08fd9f00000000000000000000000000005346cc07f03aca45184cf4d813ff22b00f10f1a36f9c9710455fc853cb6d5ce2f415ce969835aa47dc01e5996981c150a867dccc04548d76f7b9b121869884062eb28adf641dca6360e16c7f31b56531de2bc954dd6381ce7b76824be11a9bba970a1934b7458ab68c13"], 0x247) open(&(0x7f00000000c0)='./file1\x00', 0x141042, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x10, 0x8003, 0x8020001) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) syz_mount_image$tmpfs(&(0x7f0000000080)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x4, 0x1, &(0x7f0000000240)=[{&(0x7f0000000600)="9dff0a0dfb021db9e145d344f7cecd00bc0976ee364d1ff65df23800026053e5eb98dcbb0f3a341b5ac244d84ef2bb3f6f8cdf0a5d2d976e32009f1c4ed6efda1fea1154a0cf48b7fbeeb197bdab66e78f45f1c85b7df87d0f4b30de8f685fbab133123a74bf3aaf4c3b3d944310a2adeca420b1e34ec55b4eb5629f02b8a1040c96a0290d30cc33fe6b13cadb0d12e97e16db818b3c3c2a3535cff94211b5de6c596b6fc79586014f1b52e150c86615b6111a21a22aa9a8c1813b0316bb67ca715bdc974790908a77bddf36949e9619a8ac6fb94941", 0xd6, 0xffffffffffffffe1}], 0x2000000, &(0x7f0000000800)={[{@mpol={'mpol', 0x3d, {'local', '=relative', @void}}}, {@uid={'uid'}}], [{@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280), 0x1033b) fdatasync(r3) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000200)={0x0, r3, 0x8028}) creat(&(0x7f0000000300)='./file0\x00', 0x0) creat(&(0x7f0000000180)='./bus\x00', 0x80) [ 943.691183] audit: type=1800 audit(1586540738.124:4920): pid=26837 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15879 res=0 [ 943.843161] audit: type=1800 audit(1586540738.274:4921): pid=26850 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15879 res=0 [ 944.026504] audit: type=1800 audit(1586540738.454:4922): pid=26855 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15900 res=0 [ 944.167859] tmpfs: Bad value 'local=relative' for mount option 'mpol' [ 944.203629] EXT4-fs error (device sda1): mb_free_blocks:1452: group 13, inode 15842: block 428072:freeing already freed block (bit 2088); block bitmap corrupt. [ 944.219364] EXT4-fs error (device sda1): ext4_mb_generate_buddy:744: group 13, block bitmap and bg descriptor inconsistent: 30679 vs 30680 free clusters [ 944.233603] EXT4-fs (sda1): pa 00000000e479f086: logic 32768, phys. 428032, len 2048 [ 944.241670] EXT4-fs error (device sda1): ext4_mb_release_inode_pa:3854: group 13, free 2008, pa_free 2007 [ 944.366289] tmpfs: Bad value 'local=relative' for mount option 'mpol' [ 944.400389] EXT4-fs error (device sda1): mb_free_blocks:1452: group 15, inode 15842: block 495656:freeing already freed block (bit 4136); block bitmap corrupt. [ 944.416013] EXT4-fs error (device sda1): ext4_mb_generate_buddy:744: group 15, block bitmap and bg descriptor inconsistent: 28376 vs 28377 free clusters [ 944.430309] EXT4-fs (sda1): pa 000000009da3a734: logic 32768, phys. 495616, len 2048 [ 944.438263] EXT4-fs error (device sda1): ext4_mb_release_inode_pa:3854: group 15, free 2008, pa_free 2007 [ 944.638716] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 944.728653] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 17:45:40 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x4}, {&(0x7f0000000000)=""/6, 0xffffffffffffff2c}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:45:40 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0xc020660b, &(0x7f0000000080)=0xffffffc0) 17:45:40 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x11c19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000007, 0x0, @perf_bp={0x0, 0x9}, 0x5b991ddc9cdf5b8a, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3}, 0x0, 0xd, r0, 0x1) gettid() perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000001280)=""/4096, 0x1000}], 0x1, 0x0) timer_create(0x8, &(0x7f00000001c0)={0x0, 0x3e, 0x4}, &(0x7f0000000040)) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x247) open(&(0x7f00000000c0)='./file1\x00', 0x141042, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x10, 0x8003, 0x8020001) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) syz_mount_image$tmpfs(&(0x7f0000000080)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x4, 0x1, &(0x7f0000000240)=[{&(0x7f0000000600)="9dff0a0dfb021db9e145d344f7cecd00bc0976ee364d1ff65df23800026053e5eb98dcbb0f3a341b5ac244d84ef2bb3f6f8cdf0a5d2d976e32009f1c4ed6efda1fea1154a0cf48b7fbeeb197bdab66e78f45f1c85b7df87d0f4b30de8f685fbab133123a74bf3aaf4c3b3d944310a2adeca420b1e34ec55b4eb5629f02b8a1040c96a0290d30cc33fe6b13cadb0d12e97e16db818b3c3c2a3535cff94211b5de6c596b6fc79586014f1b52e150c86615b6111a21a22aa9a8c1813b0316bb67ca715bdc974790908a77bddf36949e9619a8ac6fb94941", 0xd6, 0xffffffffffffffe1}], 0x2000000, &(0x7f0000000800)={[{@mpol={'mpol', 0x3d, {'local', '=relative', @void}}}, {@uid={'uid'}}], [{@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280), 0x1033b) fdatasync(r3) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000200)={0x0, r3, 0x8028}) creat(&(0x7f0000000300)='./file0\x00', 0x0) creat(&(0x7f0000000180)='./bus\x00', 0x80) 17:45:40 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x48}}, 0x0) 17:45:40 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="10514f41291284113f37d6"], 0xb) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000000)={0x8, 0x0, 0x2, {0x7, 0x2a35, 0x1000, 0x3}}) r1 = gettid() tkill(r1, 0x1000000000016) ptrace$getenv(0x4201, r1, 0x1b, &(0x7f0000000080)) syz_mount_image$hfsplus(&(0x7f0000000240)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001940)={[{@barrier='barrier'}, {@decompose='decompose'}]}) 17:45:40 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r1, r2, 0x0, 0x200fff) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001400b59500000000000000000a400000", @ANYRES32=r5, @ANYBLOB="1400020000000000000000000000ffff0000000096bee940f50492b08f7df62827c0f92ca993654341b491bcd508e437df1239da3bf8e2cc43119e1016c2c5cc4f5357dbbb6d4aeb5d85e3aaafae0110ffb16baf075c9878fce6f36ceeeb5a77be233867e63353ea4ff598c97cd3a68259a54867b212f0e3a08d02703d2d7c1e35e9"], 0x2c}}, 0x0) r6 = socket(0x10, 0x0, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r8 = add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) prctl$PR_SET_PDEATHSIG(0x1, 0x2) add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f00000000c0), 0x0, r8) keyctl$get_persistent(0x16, r7, r8) sendmsg$nl_xfrm(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=@updsa={0xf8, 0x1a, 0x200, 0x70bd2a, 0x25dfdbfc, {{@in=@remote, @in6=@remote, 0x4e24, 0x2, 0x4e21, 0xfff7, 0xa, 0xc0, 0x0, 0x2, r5, r7}, {@in=@dev={0xac, 0x14, 0x14, 0x2a}, 0x4d2, 0x6c}, @in=@broadcast, {0x401, 0xee7, 0x80, 0x20, 0x5, 0x9, 0x3, 0xfffffffffffffff8}, {0x101, 0x5, 0x1f}, {0x6, 0x8, 0xfffffff7}, 0x70bd27, 0x3507, 0xa, 0x2, 0x1, 0x84}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @multicast1}, 0x100000}, 0x20) [ 945.807539] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 945.889867] Bluetooth: Invalid header checksum [ 945.895575] Bluetooth: Invalid header checksum [ 946.041289] EXT4-fs error (device sda1): mb_free_blocks:1452: group 8, inode 15912: block 276520:freeing already freed block (bit 14376); block bitmap corrupt. [ 946.056362] EXT4-fs error (device sda1): ext4_mb_generate_buddy:744: group 8, block bitmap and bg descriptor inconsistent: 18391 vs 18392 free clusters [ 946.070349] EXT4-fs (sda1): pa 00000000aa65a55c: logic 32768, phys. 276480, len 2048 [ 946.078274] EXT4-fs error (device sda1): ext4_mb_release_inode_pa:3854: group 8, free 2008, pa_free 2007 17:45:40 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x8, 0x35, 0x2, 0x2}, 0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @local}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xe2e0}, 0xfe20) 17:45:40 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xb) ioctl$SIOCX25SSUBSCRIP(r1, 0x89e1, &(0x7f0000000200)={'veth0_to_hsr\x00', 0x481, 0x20}) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r2, 0x0, 0x0) write$P9_RWSTAT(r2, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x200fff) ioctl$KDDELIO(r3, 0x4b35, 0x5) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0xffffffc0) dup2(r2, r0) 17:45:40 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040), 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x48}}, 0x0) [ 946.158136] tmpfs: Bad value 'local=relative' for mount option 'mpol' [ 946.224463] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:45:40 executing program 3: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000001880), 0x4) r1 = gettid() tkill(r1, 0x1000000000016) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x8, 0x98, 0x20, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xc}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43408) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events\x00', 0x0, 0x0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000300010040d5ae7d0200ff050005", 0x2e}], 0x1}, 0x80) 17:45:40 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="10514f41291284113f37d6"], 0xb) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r1, 0xc0884123, &(0x7f0000000040)={0x3, "388a0d5180fc9e657580f084b2ebfcfae45efcb1ba2331288ec1b2c66dae4ff2880e1a14be98e4ed07d2e18f97c778b5f5f360f86327606e0aeaa092c797d172", {0x8}}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @multicast1}}, 0x20) [ 946.386102] bridge0: port 2(bridge_slave_1) entered disabled state [ 946.392823] bridge0: port 1(bridge_slave_0) entered disabled state 17:45:41 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) ioctl$IMGETCOUNT(r3, 0x80044943, &(0x7f0000000100)) lseek(0xffffffffffffffff, 0x5, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0xfffffffffffffcd0, 0x7f, 0x1}, 0xfffffe16) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r4, 0x800002, 0x0) close(0xffffffffffffffff) r5 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0xffffffc0) [ 946.780889] Bluetooth: Invalid header checksum [ 946.785613] Bluetooth: Invalid header checksum [ 947.256381] Bluetooth: Invalid header checksum [ 947.264840] Bluetooth: Invalid header checksum [ 947.285534] Bluetooth: Invalid header checksum [ 947.302090] Bluetooth: Invalid header checksum [ 947.341286] Bluetooth: Invalid header checksum [ 947.450840] Bluetooth: Invalid header checksum [ 947.639073] Bluetooth: Invalid header checksum [ 947.644377] Bluetooth: Invalid header checksum [ 947.834022] kauditd_printk_skb: 7 callbacks suppressed [ 947.834036] audit: type=1800 audit(1586540742.264:4930): pid=26947 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15921 res=0 [ 947.862444] audit: type=1800 audit(1586540742.264:4931): pid=26957 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15921 res=0 [ 947.929522] audit: type=1800 audit(1586540742.264:4932): pid=26943 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15921 res=0 17:45:43 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES32, @ANYPTR64, @ANYRESHEX], 0x0, 0x1e}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x4}, {&(0x7f0000000000)=""/6, 0xffffffffffffff2c}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:45:43 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040), 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x48}}, 0x0) 17:45:43 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x80000, 0x0) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000080)={[0x2, 0x7863, 0x1, 0x7f, 0x3, 0x4, 0x100000001, 0x2, 0x3, 0x9, 0x3, 0x7f6c, 0x9, 0x100, 0x200, 0x6], 0x2, 0x90000}) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r1, r2, 0x0, 0x200fff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f0000000000)={@rand_addr="663f16ce0297f9ca602900", 0xffffffff, 0x0, 0x2, 0x0, 0x0, 0x1}, 0x20) 17:45:43 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xa) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) accept$inet6(r2, &(0x7f0000000180), &(0x7f0000000200)=0x1c) sendfile(0xffffffffffffffff, r0, 0x0, 0x200ffe) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0xffffffc0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x2461a0, 0x0) move_pages(0x0, 0x8, &(0x7f0000000240)=[&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil], 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3) 17:45:43 executing program 0: mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180)) mount(&(0x7f0000000040)=ANY=[@ANYBLOB="5b3f193a5d3a"], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ceph\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1002000000013) r1 = socket$inet6(0xa, 0x400000000001, 0x0) socket$inet6(0xa, 0x3, 0x3f) close(r1) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r1, r2, 0x0, 0x200fff) mq_timedsend(r2, &(0x7f0000000000)="259e002897fe409426fd13e9a47e1477b128d053f20b40", 0x17, 0x2, &(0x7f0000000080)={0x0, 0x1c9c380}) openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) [ 948.917415] libceph: resolve '?' (ret=-3): failed [ 948.934867] libceph: parse_ips bad ip '[?:]' [ 948.948612] audit: type=1800 audit(1586540743.374:4933): pid=26971 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=15934 res=0 [ 948.976245] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 949.000038] libceph: resolve '?' (ret=-3): failed 17:45:43 executing program 5: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x40000, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x8001, 0x0, 0x0, 0x0, 0x2, 0x3}, 0x20) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000180)='GVL\x00\x00\x90U\x91\xaf\xd4\x01j\x12W\x11\x97e4\x0f\xc5m\xcc\x1b\xc2Y\x11\xdf\xd6\xb2n\xe1\x82\xd6\xb3\x1a\x98H\x06l\x0e\xa0\xa23\xba\nB\x87v\xaa\xe0\xec\xcb\xaf\xe7y\x87\x13\x06\xa8\xc4\xb4\x90\xa1\xef\xc5F\x80\xa0-\xcd{1uj1p\xfc\xe8\xc7uQ\xbfay\x8c\xb2\xca\xc8\xf5\x8be3\xa1,\x96\xc1k\x80\x04\x12\xb9!\xe6\x88\xc0U:\xe3\xc3\x92', 0x0) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e1f, @rand_addr=0xdd}}, 0x24) sendmmsg(r3, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000100100000100000005e8000000000000e458c598ba4904c77813ab29bb450a2e834efe3f87695931515781ae36a4d148f269399022f544be4fac9508cce4df4d7015eb593d67d7bceaec72aad3447cf5c40bbfb45e2584f446722053f1502598808b355f7b815bdb2281145dd688759944bd09b0f55e7ca54b07bd9189de8daeb173aca360f4bca4f5019235efcea227e56f94ddc8d5e02f38fdcdad2e5cc22b1f090ecf60605f3d812967"], 0x18}}], 0x1, 0x0) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r4 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r1, r4, 0x0, 0x200fff) ioctl$KVM_ASSIGN_SET_INTX_MASK(r4, 0x4040aea4, &(0x7f0000000080)={0x0, 0x7, 0xff, 0x1, 0x3}) [ 949.037269] libceph: parse_ips bad ip '[?:]' [ 949.076915] audit: type=1800 audit(1586540743.414:4934): pid=26974 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=15934 res=0 [ 949.079269] Bluetooth: Invalid header checksum [ 949.109545] Bluetooth: Invalid header checksum 17:45:43 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x733, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340)}, 0x0, 0x4, 0x401, 0x0, 0x0, 0x0, 0x21}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, 0x0) r0 = syz_open_dev$video(&(0x7f0000000240)='/dev/video#\x00', 0x57d, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000280)) r1 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_FLAGS={0x8, 0x8, 0x3778bcbaae6b531f}, @IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x34}}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x1a, r5, 0x1, 0xe7, 0x6, @remote}, 0x14) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r1, 0x40045731, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(0xffffffffffffffff, 0x40184150, &(0x7f0000000200)={0x0, 0x0}) [ 949.165837] Bluetooth: Invalid header checksum [ 949.197575] audit: type=1800 audit(1586540743.424:4935): pid=26968 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15953 res=0 17:45:43 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040), 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x48}}, 0x0) 17:45:43 executing program 3: rmdir(&(0x7f0000000040)='./file0\x00') [ 949.364525] audit: type=1800 audit(1586540743.444:4936): pid=26973 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15953 res=0 17:45:43 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000001800)='cgroup.type\x00', 0x2, 0x0) lseek(r2, 0x7ff, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x40, 0x0) setsockopt$netrom_NETROM_T2(r3, 0x103, 0x2, &(0x7f0000000180)=0x7, 0x4) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) r4 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0xffffffc0) [ 949.470629] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 949.487519] audit: type=1800 audit(1586540743.494:4937): pid=26983 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15935 res=0 [ 949.563256] audit: type=1800 audit(1586540743.504:4938): pid=26983 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15935 res=0 17:45:44 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000440)=@security={'security\x00', 0xe, 0x4, 0x368, 0xffffffff, 0xd0, 0x1a0, 0x1a0, 0xffffffff, 0xffffffff, 0x298, 0x298, 0x298, 0xffffffff, 0x4, &(0x7f0000000080), {[{{@ipv6={@mcast1, @empty, [0xff000000, 0xff000000, 0xffffff00, 0xff], [0x0, 0xff, 0xff, 0xff000000], 'lo\x00', 'team0\x00', {}, {0xff}, 0x3a, 0x40, 0x1, 0x4}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0xe61d}}}, {{@ipv6={@empty, @dev={0xfe, 0x80, [], 0x3a}, [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], [0xff000000, 0xffffff00, 0xff000000, 0xff000000], 'batadv_slave_1\x00', 'team_slave_1\x00', {0xff}, {0xff}, 0x2e, 0x4, 0x6, 0x2}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28, 'mh\x00'}, {"29c1", 0x1}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x2, 0x7}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) write$binfmt_aout(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="10514f41291284113f37d6"], 0xb) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x3) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) r5 = dup2(r4, r0) ioctl$BINDER_THREAD_EXIT(r5, 0xc0046209, 0x719000) [ 949.597299] audit: type=1800 audit(1586540743.764:4939): pid=26996 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=15897 res=0 [ 949.669949] Bluetooth: Invalid header checksum [ 949.675334] Bluetooth: Invalid header checksum [ 949.687941] Bluetooth: Invalid header checksum 17:45:44 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x48}}, 0x0) [ 949.937912] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:45:46 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES32, @ANYPTR64, @ANYRESHEX], 0x0, 0x1e}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x4}, {&(0x7f0000000000)=""/6, 0xffffffffffffff2c}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:45:46 executing program 3: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040), 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x48}}, 0x0) 17:45:46 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x733, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340)}, 0x0, 0x4, 0x401, 0x0, 0x0, 0x0, 0x21}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, 0x0) r0 = syz_open_dev$video(&(0x7f0000000240)='/dev/video#\x00', 0x57d, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000280)) r1 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_FLAGS={0x8, 0x8, 0x3778bcbaae6b531f}, @IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x34}}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x1a, r5, 0x1, 0xe7, 0x6, @remote}, 0x14) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r1, 0x40045731, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(0xffffffffffffffff, 0x40184150, &(0x7f0000000200)={0x0, 0x0}) 17:45:46 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r3 = add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f00000000c0), 0x0, r3) keyctl$get_persistent(0x16, r2, r3) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000100)={0x7, 0x7f, {0x0}, {r2}, 0x7fff, 0xea8}) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000180)=r4) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000200)={{0x2e, @dev={0xac, 0x14, 0x14, 0x15}, 0x4e20, 0x2, 'nq\x00', 0x4, 0x2, 0xd}, {@multicast2, 0x4e23, 0x0, 0xfffff844, 0x1ff, 0x9}}, 0x44) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) r5 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0xffffffc0) 17:45:46 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r1, r2, 0x0, 0x200fff) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r4, 0x533, 0x0, 0x0, {{}, {}, {0x9}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r4, 0xfb28149e28936c6d, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x8000, @link='broadcast-link\x00'}}}, ["", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x6, 0x0, 0x2}, 0x20) 17:45:46 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x48}}, 0x0) [ 952.030110] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 952.170662] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:45:46 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="10514f41291284113777d6"], 0xb) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, &(0x7f00000003c0)={0x8, 0x9, 0x5, 0x1ff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000000c0)={{{@in6=@local, @in6=@empty}}, {{@in6=@empty}, 0x0, @in6=@remote}}, &(0x7f0000000040)=0xe8) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000240)=""/241, &(0x7f0000000080)=0xf1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000340)='/dev/hwrng\x00', 0x101100, 0x0) write$eventfd(r5, &(0x7f0000000380), 0x8) 17:45:46 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES32, @ANYPTR64, @ANYRESHEX], 0x0, 0x1e}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x4}, {&(0x7f0000000000)=""/6, 0xffffffffffffff2c}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:45:46 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000200)) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x200fff) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x104) lseek(r3, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="10514f41291284113f37d6"], 0xb) write$P9_RLOPEN(r3, &(0x7f0000000080)={0x18, 0xd, 0x1, {{0x4, 0x1, 0x1}, 0x9}}, 0x18) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x12) 17:45:46 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @multicast1}}, 0x20) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="10514f41291284113f37d6"], 0xb) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000040), &(0x7f0000000080)=0x40) 17:45:46 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)) socket$inet6_udp(0xa, 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="10514f41291284113f37d6"], 0xb) ioctl$SOUND_MIXER_READ_CAPS(r0, 0x80044dfc, &(0x7f0000000000)) syz_emit_ethernet(0x86, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @local}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "0f73545c78a2d45bd3e0f05d017b560d206da8dcd386b02f0774990ab4779450", "590420c063086ce451e7d93000c4df31", {"b8f086f6161528345042e99359b98acd", "8462781f39012439f9913895855a8b97"}}}}}}}, 0x0) 17:45:47 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x48}}, 0x0) [ 952.563676] IPVS: length: 241 != 8 17:45:47 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @multicast1}}, 0x20) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r1, r2, 0x0, 0x200fff) read$eventfd(r2, &(0x7f0000000040), 0x8) [ 952.589385] Bluetooth: Invalid header checksum [ 952.594105] Bluetooth: Invalid header checksum [ 952.601743] Bluetooth: Invalid header checksum [ 952.674355] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:45:47 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = socket$kcm(0x11, 0x2, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000040)=0xffffffffffffff01) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000000c0)=r1, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000480)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000fefffe7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000c9be17044171e1d3d7b196d079c4d4758fa35d17c668a4b63e069efb29797573b8530e31ec24925095a163b9d4e76be266e31a80212240baa44e080addde36e5fdc6c42a7b3f912f6906a6e2313091dd61258a1fda45991fbdce6793c8a4785ee8b60092659b941bbd694d1f8898b3e6"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0x2d1, 0x0, &(0x7f00000000c0)="b9ff0300000d698cb89e40f008001fffffff00004000632f77", 0x0, 0x100, 0x6000000000000000}, 0x28) 17:45:47 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$binfmt_aout(r2, 0x0, 0x57) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) r4 = open(&(0x7f0000000180)='./file0\x00', 0x101040, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x100002) 17:45:47 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r1, r2, 0x0, 0x200fff) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.controllers\x00', 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f0000000080)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @multicast1}}, 0x20) [ 952.850001] kauditd_printk_skb: 14 callbacks suppressed [ 952.850015] audit: type=1800 audit(1586540747.284:4954): pid=27103 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=15847 res=0 17:45:47 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, 0x0, &(0x7f0000000180)) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}, @IFLA_MASTER={0x8}]}, 0x48}}, 0x0) [ 953.034821] audit: type=1800 audit(1586540747.384:4955): pid=27114 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15847 res=0 [ 953.043998] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 953.105697] audit: type=1800 audit(1586540747.434:4956): pid=27112 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15956 res=0 17:45:47 executing program 0: syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x7fff, 0x0) unshare(0x2a000400) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f00000000c0)={0x8}, &(0x7f0000000100), 0x0) [ 953.229965] audit: type=1800 audit(1586540747.454:4957): pid=27119 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=16002 res=0 [ 953.299263] IPVS: length: 241 != 8 17:45:47 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r1, r2, 0x0, 0x200fff) ioctl$VIDIOC_ENUMAUDIO(r2, 0xc0345641, &(0x7f0000000100)={0x200, "5d6a9790b61f27656262c254e27af64e6161a56fb75dc9258c90b69223b543c6", 0x0, 0x1}) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r3, 0x0, 0x0) write$P9_RWSTAT(r3, &(0x7f0000000000)={0x7, 0x7f, 0x2}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') fallocate(0xffffffffffffffff, 0x44, 0x3ff, 0x1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200fff) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000180)=0x9, 0x4) r4 = open(&(0x7f0000000200)='./bus\x00', 0xc4042, 0x29) sendfile(0xffffffffffffffff, r4, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0xffffffc0) [ 953.370713] audit: type=1800 audit(1586540747.544:4958): pid=27123 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15847 res=0 [ 953.453056] audit: type=1800 audit(1586540747.584:4959): pid=27112 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15956 res=0 [ 953.486796] audit: type=1800 audit(1586540747.674:4960): pid=27119 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=16002 res=0 [ 953.534756] audit: type=1800 audit(1586540747.884:4961): pid=27144 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15945 res=0 [ 953.566092] audit: type=1800 audit(1586540747.954:4962): pid=27144 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15945 res=0 [ 953.647243] audit: type=1800 audit(1586540748.074:4963): pid=27151 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15945 res=0 17:45:49 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES32, @ANYPTR64, @ANYRESHEX, @ANYBLOB], 0x0, 0x1e}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x4}, {&(0x7f0000000000)=""/6, 0xffffffffffffff2c}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:45:49 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, 0x0, &(0x7f0000000180)) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}, @IFLA_MASTER={0x8}]}, 0x48}}, 0x0) 17:45:49 executing program 3: memfd_create(&(0x7f0000000340)='q\x05\x00\x00\x00\xdd\x035I\xa6\xc0\x10$\xabb\x00\x00\x00\x00\x00\x00\x01\xcb/S\xdc\xdd\x0e\a\x00\x005+\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x8aC\x96\x8c\xd0\xe6\x83\xaaw\xaa\x93\xea\xa6\xcf \x8e\xa3]\xfe\x91u\x1d\x90\xa0Z\\Y\xc4dl\xfd|o\xde\x9e\xa5\x93h\x84\x8a\xd0\xce\xff\x80\xf3/\x16u\x15\x03\xfb\xc1$\x0f\xa6[d\xd9EC\xd6~-\xcd\tey\xa0\xa8\xd7\x88\xd2{vf5\xeaX\r\xea\xb1\x1d(xb\xe80\xa5\x8e\x97Mc\x17\xb4f\xb2\xeej)\xb4\xb5\xa8\x05\\f9v\x9e\xd8\x9fT\xf4\xafD\xbb\x96\xfe\xd2\f\xb1\x12\xe6\xa5n\x1e\x90r1G\x110\x99\x18\xee@\xb1F', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000100)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[], 0x0}, 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$UHID_SET_REPORT_REPLY(r3, &(0x7f0000000580)={0xe, {0xa, 0x7, 0x9, 0x9, "e1112d2650cfbd3337"}}, 0x15) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xebb}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xa, 0xa}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x80000002, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r5, 0xc0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=0x4, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x1, 0x3}, 0x0, 0x0, &(0x7f0000000280)={0x3, 0x0, 0x0, 0x7}, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=0xffffffff}}, 0x10) 17:45:49 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000040)='/dev/vcsu#\x00', 0x8, 0x400000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @multicast1}}, 0x20) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) getsockopt$inet_dccp_int(r1, 0x21, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) sendfile(r2, r3, 0x0, 0x200fff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x840, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r4, 0x800002, 0x0) r5 = gettid() tkill(r5, 0x1000000000016) r6 = syz_open_procfs(r5, &(0x7f0000000380)='net/icmp\x00') write$P9_RAUTH(r6, &(0x7f00000003c0)={0x14, 0x67, 0x2, {0x2, 0x1, 0x6}}, 0x14) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="93460e2f2aebfee8e07b70c82877e7a7d3f9fa6fd09a1c32502977d38006e3d4494a98bf0c71d44491ae735a5e0e12bf992f5e1e3347549bb121769c49eb43424969f3119ebaee4367591fb14565dc080fa5702757393e883e58047c23ff0300000200000040888f29ee1c4b364916ee39c01b7f45c477f2069e27841c14f69578cef1624fb103f9cf00"/161], 0xb) ioctl$VIDIOC_QUERYBUF(r4, 0xc0585609, &(0x7f0000000180)={0x54617917, 0x6, 0x4, 0x18, 0x3, {0x0, 0x7530}, {0x4, 0xc, 0x1f, 0x9, 0x22, 0x4, "61db8975"}, 0x800, 0x2, @planes=&(0x7f0000000140)={0x2, 0xffff1748, @userptr=0x9, 0x81}, 0x3ff, 0x0, r1}) setxattr$trusted_overlay_redirect(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./bus\x00', 0x6, 0x2) ioctl$NBD_SET_TIMEOUT(r3, 0xab09, 0x2) 17:45:49 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, &(0x7f00000015c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8) 17:45:49 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x10400, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x1b5) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000001c0)=0x10015) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) connect$x25(r3, &(0x7f0000000100)={0x9, @remote={[], 0x3}}, 0x12) r4 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0xffffffc0) [ 955.409905] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:45:50 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r0, 0x4, 0x46c00) write(r0, &(0x7f00000001c0), 0xfffffef3) 17:45:50 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000200)={0x9e0000, 0x7fff, 0xffffbd59, r0, 0x0, &(0x7f0000000180)={0x990a70, 0x439, [], @p_u32=&(0x7f0000000100)=0xcc}}) getsockopt$llc_int(r2, 0x10c, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f00000002c0)={0xfffffffe, 0x7, 0x8, 0xee9}) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) r4 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x200fff) r5 = accept4$llc(r4, &(0x7f0000000300)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000340)=0x10, 0x80800) recvfrom$llc(r5, &(0x7f0000000380)=""/36, 0x24, 0x1e0, &(0x7f00000003c0)={0x1a, 0x305, 0x7, 0x7, 0x9, 0x8, @random="6db6b2eb372e"}, 0x10) sendfile(0xffffffffffffffff, r3, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0xffffffc0) 17:45:50 executing program 0: ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000140)={[0x0, 0x4000, 0x0, 0x10000], 0x0, 0x62, 0xfffffffffffffffe}) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4040, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = semget$private(0x0, 0x207, 0x0) semop(r2, &(0x7f0000000180)=[{0x0, 0x0, 0x1000}], 0x1) semctl$IPC_RMID(r2, 0x0, 0x0) semctl$GETVAL(r2, 0x0, 0xc, &(0x7f00000000c0)=""/15) semctl$GETVAL(r2, 0x3, 0xc, &(0x7f0000000080)=""/144) r3 = dup(r1) r4 = gettid() tkill(r4, 0x1000000000016) getpgid(r4) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0xc00}], 0xe, 0x0) [ 955.929339] Bluetooth: Invalid header checksum [ 955.934416] Bluetooth: Invalid header checksum [ 955.959082] Bluetooth: Invalid header checksum 17:45:50 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x28, r3, 0x1, 0x0, 0x0, {0x6}, [@L2TP_ATTR_IFNAME={0x14}]}, 0x28}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x44, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x2a82}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) r4 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0xffffffc0) 17:45:50 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, 0x0, &(0x7f0000000180)) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}, @IFLA_MASTER={0x8}]}, 0x48}}, 0x0) [ 956.337342] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:45:50 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x48}}, 0x0) [ 956.634452] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:45:52 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES32, @ANYPTR64, @ANYRESHEX, @ANYBLOB], 0x0, 0x1e}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x4}, {&(0x7f0000000000)=""/6, 0xffffffffffffff2c}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:45:52 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) ioctl$SNDCTL_DSP_SETDUPLEX(r1, 0x5016, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0xffffffc0) 17:45:52 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x48}}, 0x0) 17:45:52 executing program 3: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0xff, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x3, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000200)=0x8) socket$kcm(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xf1a}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x28, &(0x7f0000000240)}, 0x10) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000300), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xd, 0x0, 0x0, 0x0, 0x0, r0, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x1000000}, 0x40) socketpair$unix(0x1, 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000340)=0xa, 0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x2}, 0x20) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000426bd7000fbdbdf250800000006000b002c00000014000500000000000000fdffffffffffffff0000"], 0x30}, 0x1, 0x0, 0x0, 0x40001}, 0x20008040) semtimedop(0x0, &(0x7f0000000280)=[{0x4, 0x3, 0x1000}, {0x4, 0x8, 0x1000}, {0x1, 0x39f, 0x1400}, {0x4, 0x0, 0x1c00}, {0x4, 0x100}, {0x1, 0x3, 0x1000}, {0x3, 0x3f, 0x1800}], 0x7, &(0x7f0000000400)) socket$kcm(0x29, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000100)) [ 958.507523] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:45:53 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) dup2(r2, 0xffffffffffffffff) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r3, r4, 0x0, 0x200fff) sendmsg$nl_route(r4, 0x0, 0x40080) dup2(r1, r1) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}) r5 = add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f00000000c0), 0x0, r5) keyctl$get_persistent(0x16, 0x0, r5) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r7) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, r7}, 0xc) memfd_create(&(0x7f0000000040)='}wlan1{\x82\x00', 0x2) 17:45:53 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') syz_open_procfs(0x0, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x22000, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000280)=@assoc_value, &(0x7f00000002c0)=0x8) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) [ 958.575280] kauditd_printk_skb: 14 callbacks suppressed [ 958.575294] audit: type=1800 audit(1586540753.004:4978): pid=27246 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15978 res=0 [ 958.604628] Bluetooth: Invalid header checksum [ 958.607308] Bluetooth: Invalid header checksum [ 958.692456] audit: type=1800 audit(1586540753.114:4979): pid=27252 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=15943 res=0 17:45:53 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x48}}, 0x0) 17:45:53 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="10514f41291284113f37d6"], 0xb) sendmsg$nl_crypto(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=@alg={0x100, 0x10, 0x400, 0x70bd26, 0x25dfdbfd, {{'lrw(camellia)\x00'}, [], [], 0x0, 0x400}, [{0x8, 0x1, 0x40d2a482}, {0x8, 0x1, 0xfe25}, {0x8, 0x1, 0x4}, {0x8, 0x1, 0x4}]}, 0x100}, 0x1, 0x0, 0x0, 0x40020}, 0x4000090) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @multicast1}}, 0x20) [ 958.819665] audit: type=1800 audit(1586540753.134:4980): pid=27246 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15978 res=0 17:45:53 executing program 0: syz_mount_image$gfs2(&(0x7f0000000040)='gfs2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={[{@localflocks='localflocks'}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x1ce) lseek(r2, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x1f) write$binfmt_aout(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="10514f41291284113f37d6"], 0xb) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r2, 0x28, 0x6, &(0x7f0000000080), 0x10) r3 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) [ 958.897097] audit: type=1800 audit(1586540753.144:4981): pid=27255 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=15943 res=0 [ 958.911963] sctp: [Deprecated]: syz-executor.3 (pid 27260) Use of struct sctp_assoc_value in delayed_ack socket option. [ 958.911963] Use struct sctp_sack_info instead [ 958.977599] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 959.025848] gfs2: not a GFS2 filesystem [ 959.067410] sctp: [Deprecated]: syz-executor.3 (pid 27262) Use of struct sctp_assoc_value in delayed_ack socket option. [ 959.067410] Use struct sctp_sack_info instead 17:45:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b00010065727370616e000032ff02800400120008000500000000000947098726aa8b462b16e9aeb72e58e0d2179617d5e791c26f368f1dd42e20f1e376fdeefac363e2d1270798ddfd4956abbeb2f42fb6a9bb2ea2ac05f16f1e889cabb4179b4adaa69162940e65cb525d4987893a0001c73a0a13ee1dd9f25f70c66114806b7d77d0b0abe66ffb005b5c0379bd513ac120eabeb6e23816b8bdd41d"], 0x40}}, 0x0) 17:45:53 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(0xffffffffffffffff, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) connect$x25(0xffffffffffffffff, &(0x7f0000000100)={0x9, @null=' \x00'}, 0x12) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="10514f41291284113f37d6"], 0xb) socket$kcm(0x10, 0x2, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x14, r2, 0x1, 0x0, 0x25dfdbfc}, 0x14}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="98208ea8", @ANYRES16=r2, @ANYPTR64=&(0x7f0000000380)=ANY=[@ANYRESOCT, @ANYPTR64, @ANYRESDEC=r2, @ANYRESOCT]], 0x3}, 0x1, 0x0, 0x0, 0x4045}, 0x404c091) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0xffffffc0) [ 959.177835] gfs2: not a GFS2 filesystem 17:45:53 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x1, 0x0, 0x9, 0x4}, 0x20) [ 959.280494] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 959.391220] audit: type=1800 audit(1586540753.824:4982): pid=27293 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15929 res=0 [ 959.413123] Bluetooth: Invalid header checksum [ 959.430015] Bluetooth: Invalid header checksum [ 959.534769] audit: type=1800 audit(1586540753.964:4983): pid=27293 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15929 res=0 17:45:55 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES32, @ANYPTR64, @ANYRESHEX, @ANYBLOB], 0x0, 0x1e}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x4}, {&(0x7f0000000000)=""/6, 0xffffffffffffff2c}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:45:55 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r5 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x48}}, 0x0) 17:45:55 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x80003, 0x6b) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = open(&(0x7f0000000400)='./bus\x00', 0xc4042, 0x21) sendfile(r3, r4, 0x0, 0x200fff) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000080)=ANY=[], 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x370, 0xb8, 0xb8, 0xb8, 0x0, 0xb8, 0x2d8, 0x2d8, 0x2d8, 0x2d8, 0x2d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8, 0x0, {0x6020000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@ip={@empty, @loopback, 0x0, 0x0, 'geneve0\x00', 'ip6_vti0\x00'}, 0x0, 0x1c0, 0x220, 0x0, {}, [@common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'team_slave_1\x00', {0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x56, 0x3}}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) 17:45:55 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r1, r2, 0x0, 0x200fff) ioctl$KVM_GET_SREGS(r2, 0x8138ae83, &(0x7f0000000140)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @multicast1}}, 0x20) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r3, r4, 0x0, 0x200fff) r5 = accept$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000080)=0x1c) getsockopt$inet6_dccp_int(r5, 0x21, 0x6, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 17:45:55 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x200fff) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000440)=""/4096) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r0, r2, 0x0, 0x200fff) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r3, r4, 0x0, 0x200fff) statx(r4, &(0x7f00000000c0)='./file0\x00', 0x2000, 0x1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$security_capability(r2, &(0x7f0000000080)='security.capability\x00', &(0x7f0000000200)=@v3={0x3000000, [{0x81, 0x500}, {0x8, 0x7}], r5}, 0x18, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_dev$audion(&(0x7f0000000400)='/dev/audio#\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r6, 0x40044104, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0xa6, 0x0, 0x0, 0x2000041c5, 0x80800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = socket(0x1, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000040)={'team_slave_1\x00', &(0x7f0000000000)=@ethtool_rxfh={0x26, 0x0, 0x0, 0x0, 0x0, "d1c8a6"}}) 17:45:55 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x2c0601, 0x0) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000001c0)=0x18050) socket$xdp(0x2c, 0x3, 0x0) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000380)=""/18, 0x12}], 0x2, &(0x7f0000000300)=""/55, 0x37}, 0x10020) close(0xffffffffffffffff) r5 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0xffffffc0) [ 961.610616] audit: type=1800 audit(1586540756.044:4984): pid=27310 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15999 res=0 17:45:56 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x20, 0x103200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @multicast1}}, 0x20) [ 961.687058] audit: type=1800 audit(1586540756.044:4985): pid=27307 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16321 res=0 17:45:56 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r5 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x48}}, 0x0) [ 961.738516] Bluetooth: Invalid header checksum [ 961.743413] Bluetooth: Invalid header checksum 17:45:56 executing program 0: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$SNDCTL_DSP_NONBLOCK(0xffffffffffffffff, 0x500e, 0x0) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r1, &(0x7f0000000700)=[{&(0x7f0000000000)=@in={0x2, 0x0, @dev}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000300)="a0", 0x1}], 0x1}], 0x1, 0x44) fsetxattr(r1, &(0x7f00000000c0)=@known='trusted.overlay.redirect\x00', &(0x7f0000000180)='\x00', 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000003, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000009d93bb5b5be3316d875c276675bc5209cd36abfb15c68251289c30807a3c30471fa819e35fa9a1cf64201a11a94407bb5145c565c51a205f22b0bb4047e650be", @ANYRES16=0x0], 0x2}, 0x1, 0x0, 0x0, 0x40}, 0x10) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x101000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00001da000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3a) r4 = dup(0xffffffffffffffff) ioctl$SNDCTL_DSP_GETOPTR(r4, 0x800c5012, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0x2, &(0x7f0000000140)=0x13, 0x4) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002500)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)}], 0x1, 0x0) [ 961.838676] audit: type=1800 audit(1586540756.064:4986): pid=27308 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16387 res=0 17:45:56 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./bus\x00', &(0x7f0000000180)='trusted.overlay.upper\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0xd1, 0x2) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0xffffffc0) [ 961.973421] audit: type=1800 audit(1586540756.064:4987): pid=27311 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=16401 res=0 17:45:56 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r5 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x48}}, 0x0) [ 962.118722] Bluetooth: Invalid header checksum [ 962.123562] Bluetooth: Invalid header checksum [ 962.138072] Bluetooth: Invalid header checksum 17:45:56 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, 0x0, 0x0) 17:45:59 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES32, @ANYPTR64, @ANYRESHEX, @ANYBLOB="66bd153d9fca1f3d4ada8d641bd79bfc8d335a6cb07aba4492632ecf507ea5d58ff571fc0ea2005c2477a68b56286de7f6c39a20c4a03b0c12717f48e1c462ad12892885fb00598926e239e47a64d134e0856ec4babf8a91"], 0x0, 0x76}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x4}, {&(0x7f0000000000)=""/6, 0xffffffffffffff2c}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:45:59 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, 0x0, 0x0) 17:45:59 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000200)="4167ca59e03eea9e79b2e157437a1909b99c19d6fb9307ef825cc0bc26cef115738d1217ee0d710499de68264d0fb9cd63811e2a36a605d0d5a65bb5006be4c3f6a4f2dbde547031e3dfe1451f0860faa1d2bc6615b9afc6b8338927539bfe07d8312fcc639b20", 0x67) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r5 = creat(&(0x7f0000000140)='./bus\x00', 0x21) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x0, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, 0xffffffffffffffff, &(0x7f0000000100), 0x0) 17:45:59 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x200fff) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r3, r4, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x6) 17:45:59 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @multicast1}}, 0x20) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="10514f41291284113f37d6"], 0xb) sendmsg$inet6(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="c69ccd77581f35a5acd5c048ec6e2c5418000353c511bbe6674f3fbc8db3baebc36ed4e177623ea570e9e45b169190f22199ac94456f43d25ba02ae2654c1cc437ade1cd81dcc2549fc3859e003c9e855691ad5830e53ee797f5acbbeffc1ed857a060d05595aba946b785c7c90e31994b57dc10c6fdd23e6be242706adbce9b6504ea2c71aa2dd9635014038bf7eddcdec142e941937566", 0x98}], 0x1, &(0x7f0000000180)=[@rthdr_2292={{0xb8, 0x29, 0x39, {0x6c, 0x14, 0x0, 0x3f, 0x0, [@dev={0xfe, 0x80, [], 0x15}, @empty, @mcast1, @mcast1, @dev={0xfe, 0x80, [], 0x33}, @dev={0xfe, 0x80, [], 0x3d}, @loopback, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @loopback, @ipv4={[], [], @multicast1}]}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x2b}}}, @dstopts={{0x150, 0x29, 0x37, {0x2f, 0x26, [], [@enc_lim, @enc_lim={0x4, 0x1, 0xc}, @generic={0x1f, 0x93, "9331deb4e7056f82fae76f29f12d948fb2888bafe459c9bce696922a3576ccfaae45d0cd0a1a32c90032965aa6335ecfa29a7d9e57404d806040095d2ad1651f04b19f0aea42b82fb219bf724e97a54814e91217dc565ab8e8fb1d250f0e5ea14b0d475dcf10b002102fbb451e878232739ef343edbcf6a26d86848ea747a4785d62afbe61c16555890008cce05b024ac6eb14"}, @enc_lim={0x4, 0x1, 0x3f}, @generic={0x0, 0x97, "87835311f877b6b50d22cfc69d56d27603ccb697490adf0c21949d8a866726768e35177da2de5be8b1af775ae1ee50add4c5468f6d5accbd26bc65e7caad433b580b3c1cda6d924545d4c7ff078d0377e9a66da344132ecedeece075fba2ca2597519b80f3cebc9af2d2a391ca98a9b204a327d9a6df53ce92b0d8e666629269d5112b82b553b695fdfcef311475513d8450921b2d6616"}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x4}}, @hopopts={{0x30, 0x29, 0x36, {0x89, 0x3, [], [@pad1, @ra={0x5, 0x2, 0x8}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x7fff}, @jumbo={0xc2, 0x4, 0x3f}]}}}, @hoplimit={{0x14}}, @flowinfo={{0x14, 0x29, 0xb, 0x7fff}}], 0x298}, 0x40000) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r3, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000001c0)) r4 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x200fff) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000700)={r4, &(0x7f0000000600)="45a6a8744595aa0c9e919008e88fd163794c90", &(0x7f0000000640)=""/180}, 0x20) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="10514f41291284113f37d6"], 0xb) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f00000004c0)={{0x6, 0x6, 0x5, 0x4}, 0x4, 0x10, 0x9, 0x0, 0x3, 0x2, 'syz1\x00', &(0x7f0000000480)=['uservmnet1\x00', 'lo\x00', 'proc#proc{^securityvboxnet0*\xec\x00'], 0x2c, [], [0x1, 0x0, 0x3, 0x3]}) r5 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r5, 0x0, 0x200fff) accept4$inet6(r2, 0x0, &(0x7f0000000040), 0x80800) 17:45:59 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="58000000c96293d477eb3b96d636e3476eb7f0d0453fefb93f6e47b0402bad5c61ce4dba5f044772e4ad77347fec8cfd7b27652ae7a4cfa5133fc51f67f3cb2f38764a0a0084928d310d8ccd5b474c62c13f02c90a28a060e6556c5e8459a7402fcd64b557f85f348ce135d166920ab1d614dd00", @ANYRES16=0x0, @ANYBLOB="04002bbd7000fedbdf25080000000800010001000000080005000900000008000500050000000800010003000000080005000b00000008000500060000000c0099000800000003000000080005000c000000"], 0x58}, 0x1, 0x0, 0x0, 0x480c0}, 0x40000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) dup2(r2, r4) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r5, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r5, &(0x7f0000000400)=ANY=[@ANYBLOB="10514f41291284113f37d6"], 0xb) dup2(r3, r5) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000030002707000000000000000000000000300001002c000100070001"], 0x1}}, 0x0) sendfile(r6, r1, 0x0, 0x100000001) [ 964.746151] kauditd_printk_skb: 14 callbacks suppressed [ 964.746166] audit: type=1804 audit(1586540759.174:5002): pid=27363 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir383805892/syzkaller.RxRKVS/404/cgroup.controllers" dev="sda1" ino=16012 res=1 17:45:59 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, 0x0, 0x0) [ 964.798843] Bluetooth: Invalid header checksum [ 964.811957] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 964.814540] Bluetooth: Invalid header checksum [ 964.908826] audit: type=1804 audit(1586540759.224:5003): pid=27374 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir901704689/syzkaller.hC3flM/497/bus" dev="sda1" ino=16577 res=1 [ 964.933497] selinux_nlmsg_perm: 22 callbacks suppressed [ 964.933512] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=27363 comm=syz-executor.3 [ 964.981771] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=27363 comm=syz-executor.3 17:45:59 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 17:45:59 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x200fff) [ 965.059891] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=27363 comm=syz-executor.3 [ 965.063845] audit: type=1800 audit(1586540759.224:5004): pid=27371 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=16561 res=0 [ 965.141574] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=27363 comm=syz-executor.3 [ 965.208997] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=27363 comm=syz-executor.3 [ 965.226604] audit: type=1800 audit(1586540759.234:5005): pid=27371 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=16561 res=0 17:45:59 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) [ 965.266000] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=27363 comm=syz-executor.3 [ 965.289935] audit: type=1800 audit(1586540759.304:5006): pid=27375 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16465 res=0 17:45:59 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x24) sendfile(r1, r2, 0x0, 0x200fff) mkdirat$cgroup(r2, &(0x7f0000000040)='syz0\x00', 0x1ff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @multicast1}}, 0x20) [ 965.322030] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=27363 comm=syz-executor.3 [ 965.339695] Bluetooth: Invalid header checksum [ 965.344793] Bluetooth: Invalid header checksum [ 965.375566] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=27363 comm=syz-executor.3 [ 965.393006] audit: type=1800 audit(1586540759.304:5007): pid=27375 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16465 res=0 17:45:59 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) [ 965.437216] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=27363 comm=syz-executor.3 [ 965.504779] audit: type=1800 audit(1586540759.474:5008): pid=27375 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16465 res=0 [ 965.552266] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=27363 comm=syz-executor.3 [ 965.632546] audit: type=1800 audit(1586540759.474:5009): pid=27375 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16465 res=0 [ 965.684983] audit: type=1800 audit(1586540759.694:5010): pid=27378 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=16561 res=0 [ 965.738219] audit: type=1800 audit(1586540759.694:5011): pid=27378 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=16561 res=0 17:46:02 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES32, @ANYPTR64, @ANYRESHEX, @ANYBLOB="66bd153d9fca1f3d4ada8d641bd79bfc8d335a6cb07aba4492632ecf507ea5d58ff571fc0ea2005c2477a68b56286de7f6c39a20c4a03b0c12717f48e1c462ad12892885fb00598926e239e47a64d134e0856ec4babf8a91"], 0x0, 0x76}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x4}, {&(0x7f0000000000)=""/6, 0xffffffffffffff2c}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:46:02 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) set_thread_area(&(0x7f0000000100)={0x1ff, 0x0, 0x1000, 0x1, 0x0, 0x0, 0x1, 0x1}) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0xffffffc0) 17:46:02 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6(0xa, 0x1, 0x1) close(r0) r1 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r0, r1, 0x0, 0x200fff) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000000)=0x40, 0x4) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x6}}, ["", ""]}, 0x24}}, 0x20048004) 17:46:02 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x200fff) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r3, r4, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x6) 17:46:02 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) bind$netlink(r0, &(0x7f0000000440)={0x10, 0x0, 0x0, 0x2}, 0xc) r1 = socket(0x1a, 0x2, 0x3) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r3 = add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f00000000c0), 0x0, r3) keyctl$get_persistent(0x16, r2, r3) keyctl$revoke(0x3, r3) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x560402, 0x0) ioctl$RTC_PLL_SET(r4, 0x40207012, &(0x7f0000000080)={0xf32, 0x1, 0x4, 0x80000001, 0x1, 0x4ac, 0x455e}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) 17:46:02 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) 17:46:02 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) 17:46:02 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xb4, r3, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xf7}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xc3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x6}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x589}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x16e7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x16}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}]}, 0xb4}, 0x1, 0x0, 0x0, 0xc801}, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000140)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x6c00000000000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000040)="1020f5f29008070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) [ 967.953462] Bluetooth: Invalid header checksum [ 967.959584] Bluetooth: Invalid header checksum [ 967.964220] Bluetooth: Invalid header checksum [ 967.969587] Bluetooth: Invalid header checksum [ 967.974362] Bluetooth: Invalid header checksum 17:46:02 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x44}}}, 0x20) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x103300, 0x0) 17:46:02 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x200fff) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r3, r4, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x6) [ 968.145828] f2fs_msg: 6 callbacks suppressed [ 968.145844] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) 17:46:02 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) 17:46:02 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x18080, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r2, 0x800443d2, &(0x7f0000000180)={0x4, &(0x7f0000000200)=[{@none}, {@fixed}, {@none}, {@fixed}]}) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0xffffffc0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r4, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="10514f41291284113f37d6"], 0xb) ioctl$FBIOPAN_DISPLAY(r4, 0x4606, &(0x7f0000000280)={0x280, 0x280, 0x708, 0xf0, 0x2, 0x5, 0x10, 0x2, {0xff, 0x3, 0x1}, {0x800, 0x1}, {0xffffffc1}, {0xffffff7f, 0x800}, 0x0, 0x40, 0x1ff, 0x5, 0x0, 0x0, 0xff, 0x81, 0x1f, 0x7, 0xff, 0x5, 0x8, 0x1, 0x2, 0x3}) [ 968.190970] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 968.244371] F2FS-fs (loop0): invalid crc value [ 968.273310] F2FS-fs (loop0): invalid crc value [ 968.303682] F2FS-fs (loop0): Failed to get valid F2FS checkpoint [ 968.347373] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 968.376835] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 968.380161] Bluetooth: Invalid header checksum [ 968.403963] Bluetooth: Invalid header checksum [ 968.426047] F2FS-fs (loop0): invalid crc value [ 968.457540] F2FS-fs (loop0): invalid crc value [ 968.476799] Bluetooth: Invalid header checksum [ 968.482831] Bluetooth: Invalid header checksum [ 968.493042] F2FS-fs (loop0): Failed to get valid F2FS checkpoint 17:46:05 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES32, @ANYPTR64, @ANYRESHEX, @ANYBLOB="66bd153d9fca1f3d4ada8d641bd79bfc8d335a6cb07aba4492632ecf507ea5d58ff571fc0ea2005c2477a68b56286de7f6c39a20c4a03b0c12717f48e1c462ad12892885fb00598926e239e47a64d134e0856ec4babf8a91"], 0x0, 0x76}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x4}, {&(0x7f0000000000)=""/6, 0xffffffffffffff2c}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:46:05 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @multicast1}}, 0x20) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r1, r2, 0x0, 0x200fff) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000140)={0x0, 0xa, 0x4, 0x400, 0x1, {}, {0x0, 0x2, 0x7, 0x81, 0x9c, 0x39, "f5a8174c"}, 0x5, 0x2, @fd, 0x5, 0x0, r2}) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000002c0)=r3, 0x4) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r4, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000001c0)) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r5, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r5, &(0x7f0000000400)=ANY=[@ANYBLOB="10514f41291284113f37d6"], 0xb) write$binfmt_script(r4, &(0x7f0000000200)={'#! ', './bus', [{0x20, 'posix_acl_access){mime_type*,\'vboxnet0-\xae$em0ppp0\\systemvmnet1cgroup+md5sumcpuset'}, {0x20, '+'}, {0x20, 'md5sum(usermd5sum\xca'}, {}, {0x20, '!cpusetvboxnet0&selinuxposix_acl_access'}, {0x20, '@%'}], 0xa, "6960d196e0988b098d4e1c9afcb4701628"}, 0xac) getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) write$binfmt_aout(r4, &(0x7f0000000400)=ANY=[@ANYBLOB="10514f41291284113f37d6"], 0xb) ioctl$VIDIOC_S_TUNER(r4, 0x4054561e, &(0x7f0000000040)={0x5, "3bbdfe1361bd3c18b89fac590dfa2c6f45b6f74b8223a233a67236b757d2969d", 0x3, 0x1000, 0x6, 0xc907, 0x2, 0x4, 0x6, 0x9}) 17:46:05 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x48}}, 0x0) 17:46:05 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x200fff) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r3, r4, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x6) 17:46:05 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') write$UHID_DESTROY(r1, &(0x7f0000000100), 0x4) close(0xffffffffffffffff) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0xffffffc0) 17:46:05 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23}, 0x1c) listen(r0, 0x200000000002) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000b20000000000"], 0x3}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000"], 0x1}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x4}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x14, 0x2, [@TCA_RSVP_SRC={0x8, 0x3, @empty}, @TCA_RSVP_DST={0x8, 0x2, @broadcast}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) r6 = socket$inet6(0xa, 0x5, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e23, @local}], 0x10) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x85800) bind$bt_rfcomm(r7, &(0x7f00000002c0)={0x1f, @fixed={[], 0x10}, 0x6}, 0xa) 17:46:05 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x48}}, 0x0) [ 970.934079] kauditd_printk_skb: 16 callbacks suppressed [ 970.934092] audit: type=1800 audit(1586540765.364:5028): pid=27495 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=16046 res=0 [ 971.001948] audit: type=1800 audit(1586540765.434:5029): pid=27503 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=16046 res=0 [ 971.028825] Bluetooth: Invalid header checksum [ 971.028976] Bluetooth: Invalid header checksum [ 971.033818] Bluetooth: Invalid header checksum [ 971.040229] Bluetooth: Invalid header checksum [ 971.077510] Bluetooth: Invalid header checksum [ 971.084768] Bluetooth: Invalid header checksum [ 971.139481] Bluetooth: Invalid header checksum [ 971.144474] audit: type=1800 audit(1586540765.464:5030): pid=27499 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16044 res=0 [ 971.210718] audit: type=1800 audit(1586540765.484:5031): pid=27506 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=16045 res=0 [ 971.289630] audit: type=1800 audit(1586540765.504:5032): pid=27506 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=16045 res=0 17:46:05 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x48}}, 0x0) [ 971.449841] audit: type=1800 audit(1586540765.884:5033): pid=27494 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16044 res=0 17:46:05 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x200fff) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x6) 17:46:05 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @multicast1}}, 0x20) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r3, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="10514f41291284113f37d6"], 0xb) getsockopt$sock_timeval(r3, 0x1, 0x42, &(0x7f0000000100), &(0x7f0000000140)=0x10) r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) r5 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r4, r5, 0x0, 0x200fff) ioctl$RTC_IRQP_SET(r5, 0x4008700c, 0x1282) sendfile(r1, r2, 0x0, 0x200fff) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000040)={0x1, {{0xa, 0x4e24, 0x1, @loopback, 0x631}}}, 0x88) 17:46:06 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0xffffffc0) 17:46:06 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}]}, 0x40}}, 0x0) [ 971.833922] audit: type=1800 audit(1586540766.264:5034): pid=27519 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=16977 res=0 [ 971.940089] audit: type=1800 audit(1586540766.284:5035): pid=27519 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=16977 res=0 [ 972.071727] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 972.082243] audit: type=1800 audit(1586540766.304:5036): pid=27525 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=15928 res=0 [ 972.191480] audit: type=1800 audit(1586540766.374:5037): pid=27525 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=15928 res=0 17:46:08 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES32, @ANYPTR64, @ANYRESHEX, @ANYBLOB="66bd153d9fca1f3d4ada8d641bd79bfc8d335a6cb07aba4492632ecf507ea5d58ff571fc0ea2005c2477a68b56286de7f6c39a20c4a03b0c12717f48e1c462ad12892885fb00598926e239e47a64d134e0856ec4babf8a91f13855c38d909045406c0d59e33fd28972bb492830f4e6ce007e6e91b0a5d7f8da81d7e4e6d84e0818cd9ef6"], 0x0, 0xa2}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x4}, {&(0x7f0000000000)=""/6, 0xffffffffffffff2c}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:46:08 executing program 0: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x60000, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x20000, 0x0) ioctl$SNDRV_PCM_IOCTL_LINK(r1, 0x40044160, &(0x7f0000000080)) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, &(0x7f00000000c0)={{0x1, 0x0, @descriptor="605c25e8565c322d"}}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_PROTOCOLS(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r3, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x14000008) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x20, 0x70bd26, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) ioctl$IMGETVERSION(r1, 0x80044942, &(0x7f0000000380)) openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rfkill\x00', 0x8400, 0x0) r4 = eventfd2(0x0, 0x80800) fcntl$setlease(r4, 0x400, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000400)={0xa, 0x0, 0x2a}) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000440)={0x14, 0x69, 0x2, {0x40, 0x3, 0x6}}, 0x14) socket$isdn_base(0x22, 0x3, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000480)='/dev/snapshot\x00', 0x420440, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000580)={&(0x7f00000004c0)="80e3618664798fe21d09b6f7f52c0071a0b6a111c27ad7a76e6af20f102fa13c09181859b9ef91ffbb1da181a3eb9fcec0c6636fcefff91c015eb5b49e9c5d20b3ac168b67b92ae478429920111b328dcfd112e9ca589346b3cba366929d14dd8f2c605c0fae734349c79fe297c401780e6f1d0fc755c42e8b2ca4f34eed0db7d816dd8ba430c06f03cf1369193747bd6e0ca9a58605528ff05ac523cc4729d4e5c82d42ac7663897e053d371632152d0f67", 0xb2, 0x1}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f0000000600)={r5, 0x40, &(0x7f00000005c0)=""/64}) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000680)={0xa00000, 0x8, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000640)={0xa10907, 0x2, [], @value64=0x20}}) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x50, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, [], 0x15}}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:modules_conf_t:s0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x40400c4}, 0x4000) 17:46:08 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x200fff) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x6) 17:46:08 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x200fff) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000100)={0x7fff, 0xfff8, 0x6}) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0xffffffc0) 17:46:08 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}]}, 0x34}}, 0x0) 17:46:08 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="10514f41291284113f37d6"], 0xb) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x68}}, 0x800) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @multicast1}}, 0x20) [ 974.119493] Bluetooth: Invalid header checksum [ 974.124639] Bluetooth: Invalid header checksum 17:46:08 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="10514f41291284113f37d6"], 0xb) write$rfkill(r0, &(0x7f0000000040)={0x1000, 0x7, 0x2, 0x1, 0x1}, 0x8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x1}, 0x20) 17:46:08 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}]}, 0x34}}, 0x0) [ 974.189069] Bluetooth: Invalid header checksum [ 974.196330] Bluetooth: Invalid header checksum 17:46:08 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000300)="0503c80006023e0001c480a0c52cf7c25975e697b02f86dd6b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a8816107d08f24286a57c3fe257c3314a3974bb654697f", 0x4c, 0x4000000, 0x0, 0x0) 17:46:08 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x200fff) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x6) 17:46:08 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x200fff) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000080)=0x8) r3 = open$dir(&(0x7f0000000100)='./bus\x00', 0x101000, 0x110) r4 = socket$inet6(0xa, 0x800, 0x1000800) close(r4) r5 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r4, r5, 0x0, 0x200fff) ioctl$TCSETSW2(r5, 0x402c542c, &(0x7f0000000200)={0x2, 0x8001, 0x92a9, 0x6, 0x0, "1fd99fcea7328a2d564312a52016ac7f84ecae", 0x3, 0x3ff}) unlinkat(r3, &(0x7f0000000180)='./bus\x00', 0x0) 17:46:08 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r0, r1, 0x0, 0x200fff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @multicast1}, 0x9, 0x0, 0x0, 0x9, 0x4, 0x2}, 0x20) 17:46:11 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES32, @ANYPTR64, @ANYRESHEX, @ANYBLOB="66bd153d9fca1f3d4ada8d641bd79bfc8d335a6cb07aba4492632ecf507ea5d58ff571fc0ea2005c2477a68b56286de7f6c39a20c4a03b0c12717f48e1c462ad12892885fb00598926e239e47a64d134e0856ec4babf8a91f13855c38d909045406c0d59e33fd28972bb492830f4e6ce007e6e91b0a5d7f8da81d7e4e6d84e0818cd9ef6"], 0x0, 0xa2}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x4}, {&(0x7f0000000000)=""/6, 0xffffffffffffff2c}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:46:11 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}]}, 0x34}}, 0x0) 17:46:11 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x200fff) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) sendfile(r3, 0xffffffffffffffff, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x6) 17:46:11 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x140) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x0, 0x2) sendfile(0xffffffffffffffff, r2, 0x0, 0x400000200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x1b) 17:46:11 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) membarrier(0x4, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r0, r1, 0x0, 0x200fff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000040)={@ipv4={[], [], @multicast1}, 0x4, 0x0, 0x3, 0xa, 0xfffe, 0x7}, 0x20) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) r4 = semget$private(0x0, 0x207, 0x0) semop(r4, &(0x7f0000000180)=[{0x0, 0x0, 0x1000}], 0x1) r5 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0x200fff) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x3) semctl$IPC_RMID(r4, 0x0, 0x0) semctl$GETVAL(r4, 0x0, 0xc, &(0x7f00000000c0)=""/15) semctl$GETZCNT(r4, 0x2, 0xf, &(0x7f0000000080)=""/91) ioctl$VFIO_IOMMU_GET_INFO(r3, 0x3b70, &(0x7f0000000000)={0x18, 0x0, 0x0, 0x20}) 17:46:11 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x4, "0000010001000000080044944eeba71a4976e252922cb18f6e2e2aba0000e340b7679500800000000000000101013c581103a515775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c000100000000eeff0049740000000000000006ad8e5ecc326d3a09ffc2c64b00"}, 0x80) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) ioctl$KVM_REINJECT_CONTROL(0xffffffffffffffff, 0xae71, &(0x7f0000000140)={0x3}) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="fb506f823f0000003f37d6e85b70b36d67689331aa5bb030721bdda1c9b06f9e6e42b54bfc27262c2c53f888ba8638d47936a8c6a045b8821d259b4ad7f35f591367a5a58048ff02eb6b4c8189c55697d51d070b76c7abdaf411405b827aea1e3e1d2f0d73127db0fd36d6d2ef73a4dbd8c4d0f506afb04429989735777dc11c94e5d669fc5c094a79bd062b782ee1459c24f463287e829599b5395ee8d7b76a1941a658b76824679dbaef6160c08762f4f1f52c0d42f8301cb3e5e7df7123757dd3b024dfd92d6b228118d423de4de5b90e50cefe95d90f87bdea2f1245d99119c8d47b7c067e86"], 0xe8) accept4$packet(r2, &(0x7f00000000c0), &(0x7f0000000100)=0x14, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self\x00', 0x4000, 0x0) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac608ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) shmget$private(0x0, 0x4000, 0x8, &(0x7f0000ffa000/0x4000)=nil) [ 977.201328] kauditd_printk_skb: 18 callbacks suppressed [ 977.201342] audit: type=1800 audit(1586540771.634:5056): pid=27608 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=16073 res=0 17:46:11 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x2c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}]}, 0x2c}}, 0x0) [ 977.279320] Bluetooth: Invalid header checksum [ 977.284374] Bluetooth: Invalid header checksum [ 977.289521] Bluetooth: Invalid header checksum [ 977.296000] Bluetooth: Invalid header checksum [ 977.296814] Bluetooth: Invalid header checksum [ 977.306587] Bluetooth: Invalid header checksum [ 977.366027] audit: type=1800 audit(1586540771.664:5057): pid=27608 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=16073 res=0 [ 977.425429] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:46:11 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x200fff) r3 = socket$inet6(0xa, 0x400000000001, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x6) 17:46:11 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x2c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}]}, 0x2c}}, 0x0) 17:46:12 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) ioctl$DRM_IOCTL_AGP_RELEASE(r3, 0x6431) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) r4 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) sendfile(0xffffffffffffffff, r4, 0x0, 0x200fff) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000100)={0x800, 0x1c0000, 0x4, 0x5, 0x6, "4ec9310b2a687a3e78cb8f6e25a7473c4ada71", 0xe040, 0x1ff}) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0xffffffc0) [ 977.513091] audit: type=1800 audit(1586540771.664:5058): pid=27608 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=16073 res=0 17:46:12 executing program 0: syz_read_part_table(0x9, 0x1, &(0x7f0000003800)=[{&(0x7f0000001540)="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", 0x600, 0x800}]) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="107580622fd55f514f41291284113f37d6"], 0xb) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000000)={0x8000000, 0x9, 0x9}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x204040, 0x0) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f00000000c0)) [ 977.645356] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 977.646049] audit: type=1800 audit(1586540771.674:5059): pid=27615 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=16073 res=0 17:46:12 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x2c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}]}, 0x2c}}, 0x0) [ 977.714973] Bluetooth: Invalid header checksum [ 977.720344] Bluetooth: Invalid header checksum [ 977.737263] Bluetooth: Invalid header checksum [ 977.751846] Dev loop0: unable to read RDB block 8 [ 977.761386] loop0: unable to read partition table [ 977.785171] loop0: partition table beyond EOD, truncated [ 977.816219] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 977.816868] audit: type=1800 audit(1586540771.684:5060): pid=27608 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=16073 res=0 [ 977.828897] Bluetooth: Invalid header checksum [ 977.860400] Bluetooth: Invalid header checksum [ 977.884673] Bluetooth: Invalid header checksum [ 977.895921] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 977.979140] Dev loop0: unable to read RDB block 8 [ 977.984122] loop0: unable to read partition table [ 978.007873] audit: type=1800 audit(1586540771.684:5061): pid=27608 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=16073 res=0 [ 978.044789] loop0: partition table beyond EOD, truncated [ 978.082853] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 978.124912] audit: type=1800 audit(1586540771.724:5062): pid=27614 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=16071 res=0 [ 978.210970] audit: type=1800 audit(1586540771.724:5063): pid=27613 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16072 res=0 [ 978.296133] audit: type=1800 audit(1586540771.904:5064): pid=27613 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16072 res=0 [ 978.363514] audit: type=1800 audit(1586540772.164:5065): pid=27636 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=17128 res=0 17:46:14 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES32, @ANYPTR64, @ANYRESHEX, @ANYBLOB="66bd153d9fca1f3d4ada8d641bd79bfc8d335a6cb07aba4492632ecf507ea5d58ff571fc0ea2005c2477a68b56286de7f6c39a20c4a03b0c12717f48e1c462ad12892885fb00598926e239e47a64d134e0856ec4babf8a91f13855c38d909045406c0d59e33fd28972bb492830f4e6ce007e6e91b0a5d7f8da81d7e4e6d84e0818cd9ef6"], 0x0, 0xa2}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x4}, {&(0x7f0000000000)=""/6, 0xffffffffffffff2c}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:46:14 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r1, r2, 0x0, 0x200fff) fcntl$notify(r1, 0x402, 0x80000028) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r3, 0x0, 0x0) write$P9_RWSTAT(r3, &(0x7f0000000000)={0x7}, 0x7) ioctl$TIOCSSERIAL(r3, 0x541e, &(0x7f0000000280)={0xd1, 0x6, 0x0, 0x7, 0xfea, 0x8, 0x7, 0x9, 0x1, 0x40, 0x5, 0x9, 0x0, 0x100, &(0x7f0000000200)=""/67, 0x2d59, 0x8, 0x7fffffff}) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) r4 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0xffffffc0) 17:46:14 executing program 4 (fault-call:17 fault-nth:0): ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}]}, 0x40}}, 0x0) 17:46:14 executing program 0: getrandom(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sched_setattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vsock\x00', 0x44001, 0x0) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000001bc0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001b80)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x175c}, 0x1, 0x0, 0x0, 0x4004}, 0x4400c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) fallocate(r1, 0x0, 0x0, 0x110001) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000001d00)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c80)={0x1c, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008880}, 0x800) sendfile(r2, r3, 0x0, 0x200fff) ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0106426, &(0x7f0000000340)={0x2, &(0x7f00000002c0)=[{}, {}]}) keyctl$unlink(0x9, 0x0, 0xfffffffffffffffb) statx(r1, &(0x7f0000000000)='./file0\x00', 0x400, 0x2, &(0x7f0000000100)) 17:46:14 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x200fff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x6) [ 980.325348] FAULT_INJECTION: forcing a failure. [ 980.325348] name failslab, interval 1, probability 0, space 0, times 0 [ 980.424890] CPU: 0 PID: 27668 Comm: syz-executor.4 Not tainted 4.19.114-syzkaller #0 [ 980.429027] Bluetooth: Invalid header checksum [ 980.432882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 980.432889] Call Trace: [ 980.432919] dump_stack+0x188/0x20d [ 980.432943] should_fail.cold+0xa/0x1b [ 980.432971] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 980.432998] __should_failslab+0x115/0x180 [ 980.437959] Bluetooth: Invalid header checksum [ 980.446984] should_failslab+0x5/0xf [ 980.446999] kmem_cache_alloc_node+0x260/0x730 [ 980.447016] ? retint_kernel+0x2d/0x2d [ 980.447035] __alloc_skb+0xba/0x5b0 [ 980.447052] ? skb_trim+0x180/0x180 [ 980.447138] ? netlink_autobind.isra.0+0x1e4/0x300 [ 980.447155] ? netlink_autobind.isra.0+0x217/0x300 [ 980.447173] netlink_sendmsg+0x8d6/0xcd0 [ 980.447194] ? netlink_unicast+0x6a0/0x6a0 [ 980.447207] ? move_addr_to_kernel.part.0+0x110/0x110 [ 980.447228] ? netlink_unicast+0x6a0/0x6a0 [ 980.447244] sock_sendmsg+0xcf/0x120 [ 980.447260] ___sys_sendmsg+0x803/0x920 [ 980.447279] ? copy_msghdr_from_user+0x410/0x410 [ 980.530815] ? __fget+0x319/0x510 [ 980.534333] ? lock_downgrade+0x740/0x740 [ 980.538542] ? check_preemption_disabled+0x41/0x280 [ 980.543565] Bluetooth: Invalid header checksum [ 980.543612] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 980.552998] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 980.557610] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 980.562396] ? retint_kernel+0x2d/0x2d [ 980.566344] ? sockfd_lookup_light+0xd9/0x170 [ 980.570866] ? sockfd_lookup_light+0x100/0x170 [ 980.572366] Bluetooth: Invalid header checksum [ 980.575472] __sys_sendmsg+0xec/0x1b0 [ 980.575488] ? __ia32_sys_shutdown+0x70/0x70 [ 980.575506] ? check_preemption_disabled+0x41/0x280 [ 980.575531] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 980.575550] ? trace_hardirqs_off_caller+0x55/0x210 [ 980.603850] ? do_syscall_64+0x21/0x620 [ 980.607849] do_syscall_64+0xf9/0x620 [ 980.611675] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 980.616920] RIP: 0033:0x45c889 [ 980.620134] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 980.639265] RSP: 002b:00007f5c31021c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 980.647005] RAX: ffffffffffffffda RBX: 00007f5c310226d4 RCX: 000000000045c889 [ 980.648717] Bluetooth: Invalid header checksum [ 980.654308] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000006 [ 980.654317] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 980.654324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 980.654331] R13: 00000000000009fc R14: 00000000004ccb7c R15: 0000000000000000 [ 980.665687] Bluetooth: Invalid header checksum [ 980.696882] Bluetooth: Invalid header checksum [ 980.738982] Bluetooth: Invalid header checksum 17:46:15 executing program 4 (fault-call:17 fault-nth:1): ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}]}, 0x40}}, 0x0) 17:46:15 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x6) 17:46:15 executing program 0: gettid() fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x801, 0x0) perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x48230, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x809}, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffdfff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x4840, 0x0) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000140)) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000040)=""/31, 0x1f, 0x0, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000180)='/dev/radio#\x00', 0x2, 0x2) ioctl$int_in(r2, 0x5421, &(0x7f0000000200)=0xff) openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x40000, 0x0) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x77359400}) mq_timedsend(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x8, &(0x7f00000001c0)) mq_timedsend(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, 0x0) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f0000000240), &(0x7f0000000280)=0x4) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) 17:46:15 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="10514f41291284113f37d6"], 0xb) sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x114000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x2c, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x20040800) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) eventfd2(0x6, 0x46a262e09d804c7c) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0xffffffc0) [ 980.981214] FAULT_INJECTION: forcing a failure. [ 980.981214] name failslab, interval 1, probability 0, space 0, times 0 [ 981.041286] CPU: 1 PID: 27690 Comm: syz-executor.4 Not tainted 4.19.114-syzkaller #0 [ 981.049231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 981.058635] Call Trace: [ 981.061605] dump_stack+0x188/0x20d [ 981.065272] should_fail.cold+0xa/0x1b [ 981.069220] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 981.074378] __should_failslab+0x115/0x180 [ 981.078671] should_failslab+0x5/0xf [ 981.082407] kmem_cache_alloc_node_trace+0x272/0x750 [ 981.088445] __kmalloc_node_track_caller+0x38/0x70 [ 981.093405] __kmalloc_reserve.isra.0+0x39/0xe0 [ 981.098113] __alloc_skb+0xef/0x5b0 [ 981.101768] ? skb_trim+0x180/0x180 [ 981.105434] ? netlink_autobind.isra.0+0x217/0x300 [ 981.110398] netlink_sendmsg+0x8d6/0xcd0 [ 981.114850] ? netlink_unicast+0x6a0/0x6a0 [ 981.119140] ? sock_sendmsg+0x65/0x120 [ 981.123060] ? netlink_unicast+0x6a0/0x6a0 [ 981.127456] sock_sendmsg+0xcf/0x120 [ 981.131201] ___sys_sendmsg+0x803/0x920 [ 981.135292] ? copy_msghdr_from_user+0x410/0x410 [ 981.140164] ? __fget+0x319/0x510 [ 981.143656] ? lock_downgrade+0x740/0x740 [ 981.147845] ? check_preemption_disabled+0x41/0x280 [ 981.153001] ? __fget+0x340/0x510 [ 981.156481] ? iterate_fd+0x350/0x350 [ 981.160302] ? vfs_write+0x2e6/0x550 [ 981.164039] ? __fget_light+0x1d1/0x230 [ 981.168043] __sys_sendmsg+0xec/0x1b0 [ 981.171912] ? __ia32_sys_shutdown+0x70/0x70 [ 981.176381] ? __x64_sys_sendmsg+0x1/0xb0 [ 981.180553] do_syscall_64+0xf9/0x620 [ 981.184373] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 981.189574] RIP: 0033:0x45c889 [ 981.192775] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 981.211707] RSP: 002b:00007f5c31021c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 981.219473] RAX: ffffffffffffffda RBX: 00007f5c310226d4 RCX: 000000000045c889 [ 981.226773] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000006 [ 981.234066] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 17:46:15 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r0, r1, 0x0, 0x200fff) ioctl$SNDCTL_DSP_GETTRIGGER(r1, 0x80045010, &(0x7f0000000040)) syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xffc00003, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, 0x0) [ 981.241368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 981.248697] R13: 00000000000009fc R14: 00000000004ccb7c R15: 0000000000000001 [ 981.263241] Bluetooth: Invalid header checksum [ 981.267922] Bluetooth: Invalid header checksum [ 981.271446] Bluetooth: Invalid header checksum [ 981.277187] Bluetooth: Invalid header checksum 17:46:15 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x6) 17:46:15 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x202002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x110) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) r2 = open(&(0x7f00000002c0)='./bus\x00', 0xc4042, 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r4 = open(&(0x7f0000002000)='./bus\x00', 0xce1c2, 0xbe) sendfile(r3, r4, 0x0, 0x200fff) fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, &(0x7f0000000280)=0x2) sendfile(r3, r2, 0x0, 0x201001) setsockopt$inet_dccp_buf(r1, 0x21, 0x80, &(0x7f0000000200)="e081789b8793d7cde3904683f47d7cde888b414ad35b0ecd3435aa6c39ddea6417e9d71bde6c75ce4372f65467dbc33582699023d5ffcfc2a275130e96751503ba97955bfcf9a82982fbf8608f8ad3f3db99dd22951d86c05efd87e906e268032a57b4d59f92796d2c2d052ff046bea7688fc9b50819b2", 0x77) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0xffffffc0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180)='NLBL_CALIPSO\x00') 17:46:17 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES32, @ANYPTR64, @ANYRESHEX, @ANYBLOB="66bd153d9fca1f3d4ada8d641bd79bfc8d335a6cb07aba4492632ecf507ea5d58ff571fc0ea2005c2477a68b56286de7f6c39a20c4a03b0c12717f48e1c462ad12892885fb00598926e239e47a64d134e0856ec4babf8a91f13855c38d909045406c0d59e33fd28972bb492830f4e6ce007e6e91b0a5d7f8da81d7e4e6d84e0818cd9ef6aea2c58c2da5ba2053a5d31861b8c39d8e331fce650c"], 0x0, 0xb8}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x4}, {&(0x7f0000000000)=""/6, 0xffffffffffffff2c}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:46:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0xcc}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000001) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x1fd, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000000)=ANY=[@ANYBLOB="ec"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0xff], 0x0, 0x23c1}) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r3, r4, 0x0, 0x200fff) ioctl$VIDIOC_SUBDEV_G_FMT(r4, 0xc0585604, &(0x7f00000002c0)={0x0, 0x0, {0x1, 0x8, 0x3015, 0x6, 0x9, 0x0, 0x2, 0x1}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(0xffffffffffffffff, 0x80845663, &(0x7f0000000440)={0x0, @reserved}) 17:46:17 executing program 4 (fault-call:17 fault-nth:2): ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}]}, 0x40}}, 0x0) 17:46:17 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x6) 17:46:17 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000200)={0x0, "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"}) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) close(0xffffffffffffffff) r4 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x200fff) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00') sendmsg$NL80211_CMD_GET_KEY(r4, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="040825bd7000fddbdf25090000000400508012000a00ba4d0aa6250e026c5e4185b78d3e00000a000600aaaaaaaaaaaa00000a000600bc8727341e10000009000700a982abd6760000000a0006000000000000000000b4d3070460daba0f260b772c92f5404baeb7022c9a85baeb868c9b11bf5e414f3d8ce783d1021f6914a69b9dd82fb9bd7bc15739991c1f6a7b7fbf31be6645abda6631cc169b5abc9bdcfe85b10947771c169c4cb694bb78c940c8ed0ccc09bd407104ef8aea0cc43c9788c3aaf145b9123605db397cce69120e2ceb279ec9a758b9aaf7b15a657e6ddc868ebb26afe6453e94abf60921aacdc20507e5bf7295dd8b07e14c964aba84a153f18d120eed8274a09a0965dd2aebc8e0697c40571a24c2a4d0bfdd743d970d94221f92eec10d5c913486df61db4ee18aa091a5d7bd212f46a5a0ad7c"], 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x10) sendfile(0xffffffffffffffff, r3, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0xffffffc0) [ 983.556662] FAULT_INJECTION: forcing a failure. [ 983.556662] name failslab, interval 1, probability 0, space 0, times 0 [ 983.612920] kauditd_printk_skb: 16 callbacks suppressed [ 983.612932] audit: type=1800 audit(1586540778.044:5082): pid=27747 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16107 res=0 [ 983.615276] CPU: 0 PID: 27738 Comm: syz-executor.4 Not tainted 4.19.114-syzkaller #0 [ 983.622786] audit: type=1800 audit(1586540778.044:5083): pid=27747 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16107 res=0 [ 983.637992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 983.637998] Call Trace: [ 983.638024] dump_stack+0x188/0x20d [ 983.638045] should_fail.cold+0xa/0x1b [ 983.638061] ? __netlink_lookup+0x36e/0x700 [ 983.638074] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 983.638096] __should_failslab+0x115/0x180 [ 983.638110] should_failslab+0x5/0xf [ 983.638122] kmem_cache_alloc+0x44/0x710 [ 983.638138] ? lock_acquire+0x170/0x400 [ 983.638151] ? netlink_deliver_tap+0x146/0xb90 [ 983.638167] skb_clone+0x14f/0x3d0 [ 983.638183] netlink_deliver_tap+0x959/0xb90 [ 983.638204] netlink_unicast+0x547/0x6a0 [ 983.638223] ? netlink_attachskb+0x710/0x710 [ 983.638247] netlink_sendmsg+0x80b/0xcd0 [ 983.648871] Bluetooth: Invalid header checksum [ 983.665765] ? netlink_unicast+0x6a0/0x6a0 [ 983.665779] ? move_addr_to_kernel.part.0+0x110/0x110 [ 983.665800] ? netlink_unicast+0x6a0/0x6a0 [ 983.665812] sock_sendmsg+0xcf/0x120 [ 983.665825] ___sys_sendmsg+0x803/0x920 [ 983.665844] ? copy_msghdr_from_user+0x410/0x410 [ 983.665858] ? __fget+0x319/0x510 [ 983.665886] ? lock_downgrade+0x740/0x740 [ 983.742574] Bluetooth: Invalid header checksum [ 983.744626] ? check_preemption_disabled+0x41/0x280 [ 983.744649] ? __fget+0x340/0x510 [ 983.744667] ? iterate_fd+0x350/0x350 [ 983.744689] ? vfs_write+0x2e6/0x550 [ 983.780570] ptrace attach of "/root/syz-executor.1"[27751] was attempted by "/root/syz-executor.1"[27752] [ 983.783743] ? __fget_light+0x1d1/0x230 [ 983.783767] __sys_sendmsg+0xec/0x1b0 [ 983.783781] ? __ia32_sys_shutdown+0x70/0x70 [ 983.783808] ? do_syscall_64+0x4f/0x620 [ 983.820635] do_syscall_64+0xf9/0x620 [ 983.824492] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 983.825114] Bluetooth: Invalid header checksum [ 983.829696] RIP: 0033:0x45c889 [ 983.829711] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 983.829719] RSP: 002b:00007f5c31021c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 983.829733] RAX: ffffffffffffffda RBX: 00007f5c310226d4 RCX: 000000000045c889 [ 983.829741] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000006 [ 983.829749] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 983.829756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 983.829763] R13: 00000000000009fc R14: 00000000004ccb7c R15: 0000000000000002 [ 983.836041] Bluetooth: Invalid header checksum 17:46:18 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES32, @ANYPTR64, @ANYRESHEX, @ANYBLOB="66bd153d9fca1f3d4ada8d641bd79bfc8d335a6cb07aba4492632ecf507ea5d58ff571fc0ea2005c2477a68b56286de7f6c39a20c4a03b0c12717f48e1c462ad12892885fb00598926e239e47a64d134e0856ec4babf8a91f13855c38d909045406c0d59e33fd28972bb492830f4e6ce007e6e91b0a5d7f8da81d7e4e6d84e0818cd9ef6aea2c58c2da5ba2053a5d31861b8c39d8e331fce650c"], 0x0, 0xb8}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x4}, {&(0x7f0000000000)=""/6, 0xffffffffffffff2c}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 983.917010] audit: type=1800 audit(1586540778.344:5084): pid=27740 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=17150 res=0 [ 983.954284] Bluetooth: Invalid header checksum 17:46:18 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x6) [ 984.009532] Bluetooth: Invalid header checksum [ 984.014538] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:46:18 executing program 0: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000080)={'sit0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x3f, 0x0, 0x7f, 0x5b, 0x5, 0x3, 0x6, 0xffff, 0x2c7, 0x38, 0x79, 0x5, 0x6, 0x20, 0x1, 0x0, 0x74, 0x2}, [{0x1, 0x6, 0x9, 0x7, 0x7ff, 0x25, 0x1ff, 0x1}, {0x7, 0x6, 0x9, 0x9, 0x4e8, 0x101, 0x7fff, 0x7}], "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", [[], [], [], [], [], [], [], [], []]}, 0x1978) r3 = dup2(r2, r2) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000001a40)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@rand_addr="0000000019a100f15700", 0x0, 0x0, 0x2, 0x1}, 0x20) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) [ 984.109604] audit: type=1800 audit(1586540778.394:5085): pid=27753 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=17150 res=0 17:46:18 executing program 4 (fault-call:17 fault-nth:3): ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}]}, 0x40}}, 0x0) [ 984.151844] audit: type=1800 audit(1586540778.514:5086): pid=27747 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16107 res=0 [ 984.213781] audit: type=1800 audit(1586540778.514:5087): pid=27747 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16107 res=0 [ 984.321952] FAULT_INJECTION: forcing a failure. [ 984.321952] name failslab, interval 1, probability 0, space 0, times 0 [ 984.333858] CPU: 0 PID: 27780 Comm: syz-executor.4 Not tainted 4.19.114-syzkaller #0 [ 984.341769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 984.351142] Call Trace: [ 984.353758] dump_stack+0x188/0x20d [ 984.357418] should_fail.cold+0xa/0x1b [ 984.361335] ? is_bpf_text_address+0xd0/0x160 [ 984.365855] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 984.370993] ? kernel_text_address+0x6e/0xe0 [ 984.375418] ? __kernel_text_address+0x9/0x30 [ 984.379933] ? unwind_get_return_address+0x5a/0xa0 [ 984.384979] __should_failslab+0x115/0x180 [ 984.389271] should_failslab+0x5/0xf [ 984.393012] kmem_cache_alloc+0x44/0x710 [ 984.397362] ? lock_acquire+0x170/0x400 [ 984.403123] ? busy_poll_stop+0x3c0/0x3c0 [ 984.407405] skb_clone+0x14f/0x3d0 [ 984.410996] dev_queue_xmit_nit+0x2ff/0xa00 [ 984.415363] ? validate_xmit_xfrm+0x1fc/0xdb0 [ 984.419905] dev_hard_start_xmit+0xa6/0x950 [ 984.424265] ? validate_xmit_skb+0x72c/0xd30 [ 984.428754] __dev_queue_xmit+0x270f/0x3040 [ 984.433135] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 984.437871] ? netdev_pick_tx+0x2f0/0x2f0 [ 984.442074] ? retint_kernel+0x2d/0x2d [ 984.446040] ? __skb_clone+0x274/0x7f0 [ 984.449979] ? __sanitizer_cov_trace_pc+0x44/0x50 [ 984.454880] ? __skb_clone+0x5fa/0x7f0 [ 984.459088] ? netlink_deliver_tap+0x146/0xb90 [ 984.463729] ? netlink_deliver_tap+0x8ed/0xb90 [ 984.468362] netlink_deliver_tap+0x8ed/0xb90 [ 984.472852] netlink_unicast+0x547/0x6a0 [ 984.477014] ? netlink_attachskb+0x710/0x710 [ 984.481576] netlink_sendmsg+0x80b/0xcd0 [ 984.485719] ? netlink_unicast+0x6a0/0x6a0 [ 984.490045] ? move_addr_to_kernel.part.0+0x110/0x110 [ 984.495293] ? netlink_unicast+0x6a0/0x6a0 [ 984.499566] sock_sendmsg+0xcf/0x120 [ 984.503414] ___sys_sendmsg+0x803/0x920 [ 984.507433] ? copy_msghdr_from_user+0x410/0x410 [ 984.512236] ? __fget+0x319/0x510 [ 984.515741] ? lock_downgrade+0x740/0x740 [ 984.519936] ? check_preemption_disabled+0x41/0x280 [ 984.525003] ? __fget+0x340/0x510 [ 984.528541] ? iterate_fd+0x350/0x350 [ 984.532408] ? vfs_write+0x2e6/0x550 [ 984.536172] ? __fget_light+0x1d1/0x230 [ 984.540198] __sys_sendmsg+0xec/0x1b0 [ 984.544069] ? __ia32_sys_shutdown+0x70/0x70 [ 984.548520] ? check_preemption_disabled+0x41/0x280 [ 984.553686] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 984.559104] ? trace_hardirqs_off_caller+0x55/0x210 [ 984.564183] ? do_syscall_64+0x21/0x620 [ 984.568212] do_syscall_64+0xf9/0x620 [ 984.572061] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 984.577289] RIP: 0033:0x45c889 [ 984.580511] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 984.599438] RSP: 002b:00007f5c31021c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 984.607180] RAX: ffffffffffffffda RBX: 00007f5c310226d4 RCX: 000000000045c889 [ 984.614490] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000006 17:46:18 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x6) 17:46:18 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) creat(0x0, 0x4f) accept4$llc(0xffffffffffffffff, &(0x7f0000000200)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x0, 0x1000) socket$tipc(0x1e, 0x5, 0x0) io_setup(0x3, &(0x7f0000000000)=0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r0, 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000000)={{0x0, @addr=0x10000}, 0x8}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) getpid() getpid() connect$pptp(0xffffffffffffffff, 0x0, 0x0) unshare(0x40000000) 17:46:18 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$P9_RWSTAT(r3, &(0x7f0000000180)={0xfffffffffffffd6d, 0x7f, 0x3}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) r4 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='scalable\x00', 0x9) sendfile(0xffffffffffffffff, r4, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0xffffffc0) [ 984.621805] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 984.629111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 984.636431] R13: 00000000000009fc R14: 00000000004ccb7c R15: 0000000000000003 [ 984.751529] audit: type=1800 audit(1586540779.184:5088): pid=27788 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15938 res=0 [ 984.806887] IPVS: ftp: loaded support on port[0] = 21 [ 984.813447] Bluetooth: Invalid header checksum [ 984.813502] Bluetooth: Invalid header checksum [ 984.818462] Bluetooth: Invalid header checksum [ 984.827921] Bluetooth: Invalid header checksum [ 984.838128] Bluetooth: Invalid header checksum [ 984.847636] Bluetooth: Invalid header checksum [ 984.872328] audit: type=1800 audit(1586540779.244:5089): pid=27795 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15938 res=0 17:46:19 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x6) [ 985.009273] audit: type=1800 audit(1586540779.444:5090): pid=27795 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15938 res=0 [ 985.127469] audit: type=1800 audit(1586540779.504:5091): pid=27800 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=15938 res=0 17:46:19 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x6) 17:46:19 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x5, 0x2) close(r1) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x200fff) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xe) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x1f) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x1) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000001c0)=0x48805a) write$binfmt_aout(r3, 0x0, 0x0) write$P9_RWSTAT(r2, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) ioctl$VFIO_CHECK_EXTENSION(r3, 0x3b65, 0x5) ioctl$TCFLSH(r2, 0x540b, 0x82) r4 = open(&(0x7f0000002000)='./bus\x00', 0xe4c42, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x200fff) write$snddsp(0xffffffffffffffff, &(0x7f0000000200)="89e1754362614a4107d73e2cb43eff34de7f776009cd7229f55040494046bc2ebee9e1cffc12f33df80d65a5b543283d14baf35564a5ceac843dd768a3e815bec39772b847a18aa215b787efcfebc3d99d2d718935696460ab947e01c6420426a81556c87586111a5f4480f7766213a9d1b66ea83d2459365c2a4b5cbbe61115438c9786e9", 0x85) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0x15) [ 985.471275] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:46:19 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x6) 17:46:20 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}]}, 0x40}}, 0x0) [ 985.731783] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:46:21 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES32, @ANYPTR64, @ANYRESHEX, @ANYBLOB="66bd153d9fca1f3d4ada8d641bd79bfc8d335a6cb07aba4492632ecf507ea5d58ff571fc0ea2005c2477a68b56286de7f6c39a20c4a03b0c12717f48e1c462ad12892885fb00598926e239e47a64d134e0856ec4babf8a91f13855c38d909045406c0d59e33fd28972bb492830f4e6ce007e6e91b0a5d7f8da81d7e4e6d84e0818cd9ef6aea2c58c2da5ba2053a5d31861b8c39d8e331fce650c"], 0x0, 0xb8}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x4}, {&(0x7f0000000000)=""/6, 0xffffffffffffff2c}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:46:21 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3, 0xfffffffd}, 0x3c) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x127) r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) r5 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r4, r5, 0x0, 0x200fff) ioctl$IOC_PR_CLEAR(r5, 0x401070cd, &(0x7f0000000000)={0x78}) sendmsg$tipc(r3, &(0x7f0000000500)={&(0x7f0000000280), 0x10, &(0x7f0000000100)=[{&(0x7f0000001580)="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", 0xffe0}], 0x1, 0x0, 0x0, 0xa000a0}, 0x4000) 17:46:21 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x6) 17:46:21 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) write$P9_RWSTAT(0xffffffffffffffff, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200fff) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x6f63) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100), 0x10, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="03000000040000000400000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="040000000100000002000080040300005cecb04d68b4bce06d3951c5907dafdb504cba3da93f7bfd654710c6ac9e25cf7e5d977e793db241dd6e9354831d2ea9f2c08de39a6c7d6d8021874e98df3a9114265ef5d007090d00ff526479455847a551ccf42d44975515d48c72a8307107eaaff2bb323dfaf70a33d1e2ecb23a119686a9f32eca2362402d3d1fd5b7241d9591b5d298190e91f3fa10e70ba45928ca259a28131983b20d0eb2c15a70facce2805b1180d24e"], 0x6}, 0x1, 0x0, 0x0, 0x40}, 0x48004) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r1, r2, 0x0, 0x200fff) fcntl$dupfd(0xffffffffffffffff, 0x406, r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x200fff) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000080)=0xa) 17:46:21 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}]}, 0x40}}, 0x0) 17:46:21 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x8, 0x101000) clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r2, 0x0, r3) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1) r5 = memfd_create(&(0x7f0000000040)='/dev/auts\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000007, 0x11, r5, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xd0000000, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_vs\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000700)='auxv\x00') ioctl$DRM_IOCTL_MAP_BUFS(r1, 0xc0186419, &(0x7f0000002400)={0x6, &(0x7f0000000080)=""/164, &(0x7f0000002340)=[{0x2, 0x1000, 0x7, &(0x7f0000000140)=""/4096}, {0x4866, 0x3b, 0x7fff, &(0x7f0000001140)=""/59}, {0x6, 0x8c, 0x2, &(0x7f0000001180)=""/140}, {0x80000000, 0x1000, 0x1, &(0x7f0000001240)=""/4096}, {0x4, 0xb5, 0xffff3f9b, &(0x7f0000002240)=""/181}, {0xfffffbff, 0x28, 0x8, &(0x7f0000002300)=""/40}]}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @multicast1}}, 0x20) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f00000024c0)={&(0x7f0000002440)="d2abf8b46b9e82d11f26ee431e645e2361ab90c2ef131f573eb67976e90f913f1875ec30e0f6d1de117970520f277c68f19844ee9de245f3a068a533994c58e970dd76900ee429b279e0bbd97e0b4832534f773402587d", 0x57, 0x2}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r1, 0xc00464be, &(0x7f0000002500)={r6}) [ 987.168081] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 987.279619] Bluetooth: Invalid header checksum [ 987.293478] Bluetooth: Invalid header checksum 17:46:21 executing program 2: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x2) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r0, 0x0, 0x0) write$P9_RWSTAT(r0, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) r1 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x400002, 0x4) ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000440)={0x7f, "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"}) sendfile(0xffffffffffffffff, r1, 0x0, 0x200fff) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000180)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000080)=0xffffffc0) 17:46:21 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x6) 17:46:21 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3, 0xfffffffd}, 0x3c) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x127) r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) r5 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r4, r5, 0x0, 0x200fff) ioctl$IOC_PR_CLEAR(r5, 0x401070cd, &(0x7f0000000000)={0x78}) sendmsg$tipc(r3, &(0x7f0000000500)={&(0x7f0000000280), 0x10, &(0x7f0000000100)=[{&(0x7f0000001580)="276c5bd6f0db828036f59b152925d176a9e51a4722f8fd829657ff48969c3c5f309ceaf42e7b242b7fe4fa128061aec9827004000c31fd9e31cb1c79990c2b89045ea4dc3ad63a775c80850ea10827e8a40a6c8b5fa7cc514639bb99f13c6a3d0825a738a1a53433042c75230d368c95f8a0b5562b58ecf50fd78e5def7375cd62fb5728535bf371b2ffc7d8058398075e1d0a7a4451395c39f79c26b7287cebd130de7737e77714686b9d67d87a3cf8da02cc70fdc99c1a7c916ae542b9d5baaf1f9daa4fb845fd5d5cad2073a61ce51c345150f84b3900997296d55c7d394af17b01d445465ef377508a1a29a5d6b03b0da22c973f22814fb2a802d50fb1f051e7d95d53d598a0599ec79cd27123fa1d13b7996609d4548e81ef7b1e8de8f32593ef46c3081ab55929a3c1cb1fa28a485518391a76b7b80d5941aa42222cb6f25be29ebc938af75971ffffdd4dea114ac37f38e69cb670020a7448d99b7b5e3d09bcf2625c94d6599182ce9edb0bbfea111dae3b1c9d6cd3162ce0aaebcdcf22a8d29dca0d04ebf5944168f398c500915579070586dff7a2ec6d345d1f69a8c749740aea0dbb2d30c9f7e3afd498a886c906fe09a83322d8e94b3ebe288ec1601e6a16122fa44191b6b3f5315eb0b35cb628540438919b906502eeb7cacc7d15753e456b056e6145ab65ac7c01253f3c5663495a74a0598feed07436a72d3ee1185d0fbcf89e8c5d449e0216cab8110efe923be24366dffc65bb386e7f015bb40b6fd9abbf7180b217f88d99f168c113f3ff187c202e2ae32a0238e43af612678a44a3d8373b6dc6bf820f8bf73e6411c51152f51993c66effe25c6e72a3127da6996f13691ded659e1f9d6eab1124435750dfeb60de2b2d59d9196bda3a3c5cd5054b2960481d50ce28ac4159b54f3f26a9decfc8ab36b6110eda741e21c95e3631b3de40fd3c7828fb0e3c85070eb233d4d4b1b75e0167ec62e81f1a12a0cd2e02a7a43edb384e4d0d59744bbe86611575966efe25b4191f14a368a72c13aeb4de7caff7a9439b583d08714fd22a9b1ff08297a562a859e2d21dd4f8ecf6701bcd9a30d28909c52c56a8ef739f0841ae895ad858121b1ec82ae1bbec856730aba8e2f42841c33caa862fdf8b651d90055b6725e5bf0af348ec550ad23c5a3c15c7455fdb13a57a6e452bdebbeb32200ab7dce3fab98b206ec2571e3de8904bea2265288dbaec64359cb5cd926dc025343fff78e7bdab6f541a3d2b569f37b8339d14e706163854d01ba5380d648391740e1fc2e118557692796acf6e0fa8ab21c5657259bf05a8b510eb285f306c8cdd6e185094b0ff46ec71d5a9b8e344176f263730468db893eaba00c32bdafdb1ebdc3ec441abaf4e7b2db744411ae02f33b340a373ea1a485b88073c2da7bd6828bbe4028fef4c30088c9b28daf899741029da8f52d2927250c582f16ca173", 0xffe0}], 0x1, 0x0, 0x0, 0xa000a0}, 0x4000) 17:46:21 executing program 5: close(0xffffffffffffffff) r0 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x24) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0x9, 0x8, 0xffffffff, 0x7, 0x8001, 0x6, 0x4, 0x7, 0xc46], 0x9, 0x180000, 0x0, r0}) sendfile(0xffffffffffffffff, r0, 0x0, 0x200fff) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000040)={0x853, {{0x2, 0x4e22, @multicast1}}, {{0x2, 0x4e20, @empty}}}, 0x108) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @multicast1}}, 0x20) 17:46:22 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x2, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}]}, 0x40}}, 0x0) [ 987.689076] Bluetooth: Invalid header checksum [ 987.694030] Bluetooth: Invalid header checksum 17:46:22 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="10514f41291284113f37d6"], 0xb) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x88}, 0x1, 0x0, 0x0, 0x4000}, 0x8041) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$KVM_SET_NESTED_STATE(r1, 0x4080aebf, &(0x7f0000000440)={{0x6, 0x0, 0x80, {0x4, 0x100000, 0x1}}, "228b0ddfcb629c8dd8c4ee46b03731d14e9fa2b5d4229ba85a5102ab5bdc433f9bea60b6e50c6367013abaf0f0fdc76b63e7e1e03163ad01b7340b4dd0bd249b291cf0928a09b9d71c686347eb479021635cb6d15b714aab91346ebe662b178f4e35338a378aa34a6349b08c51752acc9be0aed6e4758f7aa5fc57dc41cc26e5e39306331df0acee9f921f17f214f3c830b037e734a42298db88af80e8a328a0c9a6783e3b0f716aa76e8d27f66849519720ed1f13275e1cfb53e217c1ac878be7564833ea6932e3c5e8cc322f480253f465a07185acdda5cac522deaa6aeeb9b687594952eae4fcc5b4342e658c932ca402a3f1a7dee99cd62e71922da59b61954569420b348abcc90638b63ec9bc4ffd910cb54ab99599b6b1b28d414cd024a543468b2f9f3ac4761f57b539afba5f6993bc60475e0ee455f8c0c94cb06c8240e5f6f9ecc470ce6282483ed84cb677e8ea46193fb50f4b7c8e208a08a828987cd009db4b63aa273ed949afabd6f56349daf0b378d98cdb6e30fc6a8508ef655eba1330ea1ebd300bd9022e38d1ea0f666914d7fead106305655892cd1b695a2abd936923717e76df65116b7c9ddaaade506af69fee7ea9f1bf8283b269776fc42ca8dc2b7d19a5346fa0254e6a9180a556d2c2efbfb688fb1d5f85fee0d169cf569051b19a4ecc47ccbcfe0e25e741349f73798f155852bc89cdc58aee30e04aeb4473de7200e1dc7ce9ee3c9874ac7efc737fc9105b34c516f4952a79898f115d10f67d2e062bb07ce78b24c49bb275e7f6ea8cea6f4df0ec065fa24a337b700d7f48f74e730c1b804da7936d0398f6662b090d0b223e8280e26b51ec73d902f5ca117bdb43e7106bd4d1c2397977371f86ddfde70b04794185a48cef15914da991d6bfdb418e162820ec684c73524c409b4594972075651627d3eb5c6d142c56fc9ee0b7842dcc69ad43d95e3dccb7e18fefda6e1c0fab4e247796942c29df11dba2814239e2f3a24bd4f9dd36125072028c52bbf7bea18c4ce1f1754f7414ac89efb39bad551a1a35519af1a90219073ec5f6d4332954f74da5a236c5b0e8adddae88007fffc04ab0c32dd440c701370b579a3d8efc35bf93aa9ac3235c02c72f5ee9fbf4211c924923dd2ccd7ef4b2cf96a35bd4d0f0d35b92f6137e5139ce3049d571e63402251b6ceb3677d77e14fe2727e0eb4a3b8d137a4c2fce98de5fa8373e98c8ec45bb3621350d3c716b0eab14cb1174f999c3f8161d925d1eba7eaab57d38ab8224d0f6be54474f7e250a0ad834cdc09687d6f26d9cd5ceb438433a880a056583f7ad55ff20a2d355ff726f3b54ef0301bbedf3b5eb02f6b99cc0bcda5285965be9f4fed04d8cf77603d0c5537c0e1ea812f00dd0dce84294cd64a3edab0feb0298a4ba85b2dc84b5de2883889cc3ffb3bb73ac036d034cd3c0ad716236744a138f6562ca427de1a40153a47d9d07a971bf43cd632da54304f4aa1436d4b3e2c36cd5e4e1142b44c9b2d4891e1d9f84ef3f7c184704af959cd585038030f1271c9dadd169b7dd54b3f0ad47bf5e2dc3a3bdcfeaa55a1b17c1c3c287dd9927c2c8c6247b4f12c0db4d9552df71489acc8e023950619bbf9c4ecf7b052842d13c2576804e1ddbb945d305b06937a0ec869c6f2b30990988c2bf8ca5530126a8dadb17d47d86daa06dc51a644d48942d43e803d919a6ec947bd54ac984eb1697d7136c90bfb5ee64792ed8239ebac25e8a0f9c6e998abf621e451f94a6842fbd9c34d132dc761d4f3a8fd569a93785cb855019bf77a5e120f1b10cdac7633f21f0cc1d68b68661aad003b44f9c4bd05384f561b4ddf95e6fa6c1b6dcf526bfd6e99c130b17c64063b89377f73667f1cc72844fb9b7d65664a058753cc43cbacbf59f0a75cdb238adb1afa4134afa54641a7b13eb52749f7d8e3d60ce5bd0c0de2d84ed6e9218799be318f9ce19221a2823f78759cf1512361ddd14c4b0c86d3cbbe9214c5d2e8d683e91009f11a88317a22df8d1134430590a7fa136f93ea8862188c28b971ccf805f40d48bcc7ae212f315682a4ecab5a9394c25c29b8be05c1988a439fb4eb42905e6e4f5dd4ffc8b9070d765a6dc484c8233ad83d81bf26ee1afe0932dedd10ee0434f2a6cdb51ef53230bc39f794bec0372d30ff1b43cea4e7cfe6ebf9847b575f0247b161b534222acba101da18858636dc3702aefd167ae6dea5f842a8556e5aa917b2f7134dd7efb8c21dbf4ae83f785f71ae4e277dccf0a28093e6ab2db1a7e80f9c46000ba7eb112b7783ab68480725d1575816e9f77a9e176b594f181218f90054cf9d76a4fecc8bbd2bfbdbc9fd7c20d04eed5fdeb90cd6c3be4405600cfb29de3cd68f22cfb65399362dd23041317041f4299aa333fdaca3aca22850cfb2ce9f6586b6c29df57ad30f238e64223025c6866a2a4dbb93ae379618b91f6ce9e0434e326adeb1cc2f49a960d5177d462e91d202139b106f1258282958d1f88e416ba7807790b51da112c367593ce6ce9a32b93842bca6af789497a1ab9b11dd6205786e180d352561714ac2cc38bbfb9a9662db22b568e3c79c60c0501873c90612aec4e5b774adc83e9448da39b053f38ff5e2ed1124f2e6997f943e813cdefa15269adfc2de8c9a0af208aa38d2659485d0481f1869b19c83ddae5868834c1fa6146d4f395d85ebf6f14039742d86b862b0bcfc10763f7df811323755016cff975f5ba48813b4984429248e0af760b76da9d985e91367032ebcc0f8fd3a82761fe74a6b326472b2c3eda48b0c36dca88b9b63698f0174deac5aa8d1bff3bf11c7e838fc69c62130af98c98a86e0a934ecda120e2970c68202228fe4ce277737492a137c366aad8046ab3dba00cc1bede5463ff2801cddc722dfcb7d5d4a3f8b61e0ea6774133944653ff235305d6e072ac38e2fb09778c5166c8d531aa6fb596f963b8429c2df3e3560f59883534bf697d1d5a300a57dd0971bb536de7eb2fac13504e82f41d13cee3e2e5475be7dce1558f54fc782b568938f7d5ff93b1a26f63b046a39d41ac376ac63349f34ba5ebea32ad83607f38e2e9f56ae941d3539bf85fe94ebd9485d3d430971afb4731b3dbecd28952a94587eff46e635f306fd0d6da57170fa4ede86da251900231bd9ce36d141e5d08bde1c12f5b6a3f5372168191218685b8d220aa82672df3c249f50a54807b5669ce4fee39e3987721a8761c36934cddfc45fc82004c035ffa7b93b62b4c6b03407412cf8c39e89c39aab436bfcf2908597a0d6465e3f9f8d7ff601cc0b281317b170da7de901922a4db1455d2e6ce17cb6c27e7741a4c060c59d3b71a9c6a498e537665eb9d7910194a7ae284966681e5680a40e74f21dad08e5b3f977c18ececa65d48fe9c9765310734673710284ece436b3564bb60bf4d5a099c15dc9d32daba734370c8ba8584adcfd8388e24ce3d032226769905ee800c53f92730fc9debfe1ccc1719aae8ebe8841c89e9ff721c4af4a77a98fb8ab978cdd458ccdeb3296c2bc35328d9c4c32b1fe3b760a9f7bcc72df5c4c79d42abda9d22515228e97d985433cdf8b744c2bcbeebc49c02b69fee11e2371a920f83978214b49425824d2f31c8919020ac865c7a085ddf72b22e6cb3ed173dfc5667c1636b6c58c04155443fb7f281e334eaf37de4ab874ee44585109a4087ff23b6f2a9b676b57dda80ec8f4fe6c0fcc47a81eb74eedd02142293be2a418caa3acff89edee1ad98335d579607f8bd23c4d286ad69e60fbd4c8132fa5c6b52a16d45a3b46c4a3319a0da1fa9340a9665d074e3546d555879ca26be11829cf8fdee45ed2aed3368997cac4774dd79e480f11d2c1fa448a92519b1b9e2ffb25e7491c4cc3e137186622bc9a582ec7d792bad2d29db7d1bfc691f6060d7f1f69c1c256aaf1551903bc0292f9eb1225fad08719546d2fd0b9f0fbc6f516c84cae8f4ff757698abbd4eefabfb27de05509a79c27f546e5d6ccca4c970369dd31a2292516a233fe71c7c3d7b700f2de348827d50c87d43f58cf3de791376eec21f1f74a57edffdd26527ddb8b29474497dd9ff20cb2d0fe04ac3927a207c6e909ce91ff7400e3817c059e1428834624b632a28e3e5842e5eae0bb5f2ae6bbcfbeaf1b6fbc433a36d1b674039638fdad9ed857446495af98653184ae50c01071d4e579d722a479a6e09bfa2071e9c23fd2016091739c0cfaf8499ea7ee5b6875b2d9bbf5180786cb720619612c00e01e09b49c4a699f833752399d4306e34dbe7a7de39780837c6f15ab82f44dad3a347bab022a0d239884edfb509fe2c51c428bb659c897de940f92e083dfaba8b1d849d75d0dfe7f9932294bdc00bf5f0cf589e4b25333a4c28c6294a7fcd369bfaf0fcf3e6567c8906f747c673f9439d05f2aae6c4282a66a09547b5dd5c1267a9bcbbd76337623ccbc26f67dd7da7c476ab6410e883b74e41c3756f45e0a952440020bc96a653ba1796f6330c10af3c227a8860808fa549ef9bb76e4c0b36ee23af7ccd26a0ee42184ff56a4c85bf73291a60eda92b39f310703cd1f2cad19b51eede4b1c18f415bc894c0cd4c49adcc76589ca50d810d89eb15c1ccd48d67bbd8018516092d72de153c7dead1844bb6b6d323db709494d657ea83d39af501869e67e0daead5c5ca41b4ad3835502eb56403fb79f688efd27bbb77931b545a12f3e0c3c56b9b69d8d88a25422eeb49c8bcfe3120795ac250d04a8f6e889b178dd4dd1c9f8525c16ca43c39369df2e0d8df08d1918500692db973208f0a297f4c064a0b2575a6efc63ac3457714cad7fec74a5b0d6d9aefae889105e13d9a585cac646ded268d726abad8f1938b61746265e22b30d00c992a2341234ae7c1fdd1f6bfc05b0480de93e7c8f96e75f8125b042cef173a480ec147d76d223ff1a33bda7f3600e755848d35a33cf4b13473f2bedd7fe425c272c2c7ce32d4f5df9fd282a8fb2ae355c3e374cbc120f7bb39376a871cf4c24c67a9bfdbb071710a71f9458f3a783006343d4b996f32245b15836b83d1c80d8f5f7caaedbecdaa1f226e8765649cfd9285eacab54a1f8166bccfc5cd9cb8dd7322355ade93966e2fcb67c2618a7b8a08ee09b309d7d2757bd8c60842b0b420189220724fcf2d744b3d25447a1afbaeb8a8ee0ba4c3b061cf45c1c7cca3c3cd443aff692b472522cd7ca038ae97590bdd2411c7d46d06908ca75dd68126b110db400edd5f80fe76f5111372252090a8a8ad089e9fa852df21a25d0c951c12ddbafad7e86316cf2f9c72be26c193229d5e14bae83e45450cac391df21b7dce3c6c39a0b48c979b0f4658c404caa6ea496173ec223b0ef3dff991b77b08a0f41537e4cdaeebb081d4569d642f375986f3a66deca9068078dd784d139f5469cd2bcf474b3108a89bef4e1024614035a3474eeb18116bab0b1757eb98b7241a722dfb1c70f09c822e9cf92294c15ad3a5e650414761c8b9751aa9e6724af64cfb102edf45e446ed72c786f2773df92d9b99f5d2e3e51f87f48d930091294fe411748e8b24997347ef04bbd239b29b821f6f372d03898e6d66006c8639ae69cf00b3ce3df45c4742f5a1b81a7c2af310bbe6e237f44b06861ee157cde02c43b6a5a101c6567bcf2eb28c5e6da8a707ca91b9cd71359b3dda3b89f78b39f871cf00bd7cfc9d4bfe2f72ef6508d5725ff8944baec6f479b62022fc73b8beb6200b76e6e28b972d4575f6c5ddcb88674b63b584f3dbdc96984a2679f6b1a1811e4e93def27", "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"}) [ 987.738181] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:46:24 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES32, @ANYPTR64, @ANYRESHEX, @ANYBLOB="66bd153d9fca1f3d4ada8d641bd79bfc8d335a6cb07aba4492632ecf507ea5d58ff571fc0ea2005c2477a68b56286de7f6c39a20c4a03b0c12717f48e1c462ad12892885fb00598926e239e47a64d134e0856ec4babf8a91f13855c38d909045406c0d59e33fd28972bb492830f4e6ce007e6e91b0a5d7f8da81d7e4e6d84e0818cd9ef6aea2c58c2da5ba2053a5d31861b8c39d8e331fce650c08d036bc9abb8365d87261"], 0x0, 0xc3}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x4}, {&(0x7f0000000000)=""/6, 0xffffffffffffff2c}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:46:24 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_open_dev$admmidi(&(0x7f0000000240)='/dev/admmidi#\x00', 0x0, 0x4000) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000100)='./bus\x00', 0x0, 0x8}, 0x10) r4 = openat$md(0xffffffffffffff9c, &(0x7f0000000200)='/dev/md0\x00', 0x200080, 0x0) close(r4) r5 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0xffffffc0) 17:46:24 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x6) 17:46:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000080)="660f382b1a0f01df0f01902f1f0f32d9e90f79d16665676426f7c5000000000f22fd4545ef1e03e5", 0x28}], 0x1, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="10514f41291284113f37d6"], 0xb) write$6lowpan_control(r2, &(0x7f0000000100)='disconnect aa:aa:aa:aa:aa:11 2', 0x1e) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000000)={0x40}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000040)={0x57a, 0x0, 0xe3aa, 0x8}, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x4cb], 0x10000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 17:46:24 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @multicast1}}, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) 17:46:24 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x3, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}]}, 0x40}}, 0x0) 17:46:24 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @multicast1}}, 0x20) r1 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000100)={0x990000, 0x9, 0x8, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x980903, 0x2, [], @value=0xfffffffa}}) r2 = socket$inet6(0xa, 0xa, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) ioctl$SG_GET_VERSION_NUM(r3, 0x2282, &(0x7f0000000140)) ioctl$VIDIOC_DBG_S_REGISTER(r1, 0x4038564f, &(0x7f0000000080)={{0x2, @name="73a04553fe386b9eb6cc732338a1dfd40555b4a17ec62a4fef4962a4f9aac7c5"}, 0x8, 0x1, 0x80}) [ 990.248202] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:46:24 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}]}, 0x40}}, 0x0) [ 990.456432] kvm [27940]: vcpu0, guest rIP: 0x8d Hyper-V unhandled rdmsr: 0x4000008d [ 990.458993] Bluetooth: Invalid header checksum [ 990.475518] kauditd_printk_skb: 13 callbacks suppressed [ 990.475531] audit: type=1800 audit(1586540784.904:5105): pid=27939 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16141 res=0 [ 990.487472] Bluetooth: Invalid header checksum [ 990.510510] Bluetooth: Invalid header checksum 17:46:25 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x6) [ 990.544693] kvm [27940]: vcpu0, guest rIP: 0x8d Hyper-V unhandled rdmsr: 0x40000051 [ 990.601668] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 990.609554] kvm [27940]: vcpu0, guest rIP: 0x8d Hyper-V unhandled rdmsr: 0x4000005b [ 990.639434] audit: type=1800 audit(1586540784.944:5106): pid=27939 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16141 res=0 [ 990.666339] kvm [27940]: vcpu0, guest rIP: 0x8d Hyper-V unhandled rdmsr: 0x4000005d [ 990.734215] kvm [27940]: vcpu0, guest rIP: 0x8d Hyper-V unhandled rdmsr: 0x40000049 17:46:25 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0xffffffc0) [ 990.789434] audit: type=1800 audit(1586540784.964:5107): pid=27960 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=16094 res=0 17:46:25 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x6) 17:46:25 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @multicast1}}, 0x20) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000ea7f41c5d946704f6807685db6715452886739dfb7e678ca8b3e105d28e47b9f8d00000000000000000000000000000000000000000000000000000000000000000000000000c24a91384abd64e6d5200cad00000baf2ffa4e6ab70b24a770bfdb1297133a422e9134055d68c80a17a30f485a6bee82293e223d0b597e20e121f9712623a01b6de2fa39ce3bc93ccfeaaf6c339aa5b01247fc8badf3541842675eaca92018f37f2b28484b5ffcdbba9c6465c02a1734c69c1d7e0fbdecf6070b4e56bf1c2fd554506fdc80b137306e5f6ce44cf6574a8ed277c6e4c0c00e7b35e9"]) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) r2 = add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f00000000c0), 0x0, r2) keyctl$get_persistent(0x16, 0x0, r2) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r4) r5 = socket(0x10, 0x0, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r7 = add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f00000000c0), 0x0, r7) keyctl$get_persistent(0x16, r6, r7) mount$fuse(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='fuse\x00', 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000120000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r4, @ANYBLOB="2c64656661756c745f7065726d697373696f6e732c616c6c6f775f6f746865722c6673757569643d38663730643567642d31c937632d323730332d3330306398a3b1f079a95f5e632c666f776e65723c", @ANYRESDEC=r6, @ANYBLOB=',\x00']) write$binfmt_aout(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="10514f41291284113f37d6"], 0xb) ioctl$FBIOPUT_CON2FBMAP(r1, 0x4610, &(0x7f0000000140)={0xa, 0x2}) [ 990.909778] kvm [27940]: vcpu0, guest rIP: 0x8d Hyper-V unhandled rdmsr: 0x4000008d [ 990.917828] kvm [27940]: vcpu0, guest rIP: 0x8d Hyper-V unhandled rdmsr: 0x40000051 [ 990.928554] audit: type=1800 audit(1586540785.054:5108): pid=27966 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=16094 res=0 [ 991.025727] audit: type=1800 audit(1586540785.134:5109): pid=27971 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16141 res=0 [ 991.111081] Bluetooth: Invalid header checksum [ 991.116103] Bluetooth: Invalid header checksum [ 991.121141] Bluetooth: Invalid header checksum [ 991.123763] audit: type=1800 audit(1586540785.184:5110): pid=27958 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16141 res=0 [ 991.216107] audit: type=1800 audit(1586540785.414:5111): pid=27985 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16116 res=0 [ 991.269517] audit: type=1800 audit(1586540785.554:5112): pid=27985 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16116 res=0 17:46:27 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x10, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x40080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) symlink(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='./bus/file1\x00') mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f77657264b6d13d2ecf780d742ca09bed21f8396b3275732c77b8a360d0cd53151111471d76fcf4026f726b646972d2e32f66696c65312c758b7065726469723d2e2f6669f8fffffffffffffffd69589c92fae78e578d76afd744a906baf811"]) r1 = syz_open_procfs(0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, 0x0) dup2(r2, r1) getuid() userfaultfd(0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) getpid() link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') 17:46:27 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x6) 17:46:27 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r1, r2, 0x0, 0x200fff) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="10510000291284113f37d6d2ce17335058cb223f43a38d554c32de4e81a5f33b740f07c57081f72a9caac0d65bd606ce976f8e8d6af26eca5b9bd08b0cbdf9cf2ea729153101c8b1e5b8bafebc5e9cb7835f532662b72196d63f2154d6fa3a3b2e786e9745b3c38887e4f356ed01705abd8a875724d32117cb928901b04dd25e4b4b04863750b17cbcb56852ab8f3f39f9a8000e69c9489eb9"], 0xb) accept4$unix(r0, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x200000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @multicast1}}, 0x20) 17:46:27 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x5, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}]}, 0x40}}, 0x0) 17:46:27 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) lseek(r2, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) close(0xffffffffffffffff) close(0xffffffffffffffff) r4 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x200fff) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000200)={0x2, {{0xa, 0x4e23, 0xff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x2}}, 0x0, 0x3, [{{0xa, 0x4e23, 0x10000, @empty, 0x81}}, {{0xa, 0x4e23, 0x41, @mcast1, 0x8}}, {{0xa, 0x4e20, 0x80, @mcast2}}]}, 0x210) r5 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0xffffffc0) 17:46:27 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES32, @ANYPTR64, @ANYRESHEX, @ANYBLOB="66bd153d9fca1f3d4ada8d641bd79bfc8d335a6cb07aba4492632ecf507ea5d58ff571fc0ea2005c2477a68b56286de7f6c39a20c4a03b0c12717f48e1c462ad12892885fb00598926e239e47a64d134e0856ec4babf8a91f13855c38d909045406c0d59e33fd28972bb492830f4e6ce007e6e91b0a5d7f8da81d7e4e6d84e0818cd9ef6aea2c58c2da5ba2053a5d31861b8c39d8e331fce650c08d036bc9abb8365d87261"], 0x0, 0xc3}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x4}, {&(0x7f0000000000)=""/6, 0xffffffffffffff2c}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 993.467238] audit: type=1800 audit(1586540787.894:5113): pid=28013 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16561 res=0 17:46:28 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) dup2(r1, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e24, @rand_addr=0x8}}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000040)={@loopback, 0x1, 0x1, 0x3, 0x0, 0x200}, 0x20) [ 993.534622] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 993.556660] audit: type=1800 audit(1586540787.934:5115): pid=28015 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=16545 res=0 17:46:28 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x6) 17:46:28 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000040), &(0x7f0000000080)=0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @multicast1}}, 0x20) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r1, r2, 0x0, 0x200fff) sendmsg$AUDIT_MAKE_EQUIV(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x3f7, 0x14fd136f1930fb8, 0x70bd28, 0x25dfdbfd, {0x7, 0x7, './file0', './file0'}}, 0x28}, 0x1, 0x0, 0x0, 0xc091}, 0x4040004) 17:46:28 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x6, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}]}, 0x40}}, 0x0) 17:46:28 executing program 5: get_thread_area(&(0x7f0000000040)={0x1000, 0xffffffffffffffff, 0x1000, 0x0, 0x2, 0x1, 0x1}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @multicast1}}, 0x20) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x50000, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r3 = gettid() tkill(r3, 0x1000000000016) fcntl$lock(r2, 0x5, &(0x7f0000000180)={0x0, 0x3, 0x4, 0x2, r3}) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x6, 0x2, 0x12, 0x5}, {0x5, 0x40, 0x3, 0x1f}]}, 0x10) [ 993.917664] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:46:28 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) listxattr(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)=""/37, 0x25) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r3, 0x533, 0x0, 0x0, {{}, {}, {0x9}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x68, r3, 0x2, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x1000, @media='eth\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20044014}, 0x40044) close(0xffffffffffffffff) r4 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0xffffffc0) r5 = syz_open_dev$vcsa(&(0x7f0000000340)='/dev/vcsa#\x00', 0x6, 0x204800) recvfrom(r5, &(0x7f0000000400)=""/188, 0xbc, 0x0, &(0x7f00000004c0)=@nfc={0x27, 0x0, 0x0, 0x3}, 0x80) [ 994.172683] overlayfs: unrecognized mount option "lowerd¶Ñ=.Ïx t" or missing value [ 994.214568] Bluetooth: Invalid header checksum [ 994.226765] Bluetooth: Invalid header checksum [ 994.236936] Bluetooth: Invalid header checksum [ 994.317688] overlayfs: unrecognized mount option "lowerd¶Ñ=.Ïx t" or missing value 17:46:28 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x6) 17:46:30 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES32, @ANYPTR64, @ANYRESHEX, @ANYBLOB="66bd153d9fca1f3d4ada8d641bd79bfc8d335a6cb07aba4492632ecf507ea5d58ff571fc0ea2005c2477a68b56286de7f6c39a20c4a03b0c12717f48e1c462ad12892885fb00598926e239e47a64d134e0856ec4babf8a91f13855c38d909045406c0d59e33fd28972bb492830f4e6ce007e6e91b0a5d7f8da81d7e4e6d84e0818cd9ef6aea2c58c2da5ba2053a5d31861b8c39d8e331fce650c08d036bc9abb8365d87261"], 0x0, 0xc3}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x4}, {&(0x7f0000000000)=""/6, 0xffffffffffffff2c}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:46:30 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x7, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}]}, 0x40}}, 0x0) 17:46:30 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x200002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) ioctl$KDADDIO(r0, 0x4b34, 0x3ff) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000100)) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) socket(0x1e, 0x800, 0x3f) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r3, r4, 0x0, 0x200fff) sendfile(r4, r2, 0x0, 0x40000006) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0xffffffc0) 17:46:30 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) write$rfkill(r0, &(0x7f0000000100)={0x71, 0x9, 0x1}, 0x8) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002000000740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=r4, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, r4}, 0x10) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000140)={r4, 0x8}, 0x8) r5 = getpid() ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000040)=r5) 17:46:30 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x6) [ 996.624630] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 996.651365] kauditd_printk_skb: 10 callbacks suppressed [ 996.651379] audit: type=1800 audit(1586540791.084:5125): pid=28081 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16173 res=0 [ 996.709483] Bluetooth: Invalid header checksum [ 996.714592] Bluetooth: Invalid header checksum [ 996.735364] audit: type=1800 audit(1586540791.114:5126): pid=28081 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16173 res=0 [ 996.759076] audit: type=1800 audit(1586540791.134:5127): pid=28096 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16173 res=0 [ 996.781767] audit: type=1800 audit(1586540791.134:5128): pid=28096 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16173 res=0 [ 996.818732] Bluetooth: Invalid header checksum 17:46:31 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x8, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}]}, 0x40}}, 0x0) [ 996.915989] audit: type=1800 audit(1586540791.144:5129): pid=28097 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16753 res=0 [ 996.936931] Bluetooth: Invalid header checksum 17:46:31 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00'/11], 0xb) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001140)={&(0x7f0000000040)="1910360e8d", &(0x7f0000000080)=""/126, &(0x7f0000000100)="e88ed106c38cca60f7fd89bc88d2698e68886530160d786b19abfc38b32eedf9c71b60790fdc208b888970848e", &(0x7f0000000140)="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", 0x6, r1}, 0x38) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @multicast1}}, 0x20) [ 997.017855] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 997.039978] Bluetooth: Invalid header checksum [ 997.149024] Bluetooth: Invalid header checksum [ 997.258817] Bluetooth: Invalid header checksum [ 997.370311] Bluetooth: Invalid header checksum 17:46:32 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x9, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}]}, 0x40}}, 0x0) [ 997.507182] audit: type=1800 audit(1586540791.934:5130): pid=28097 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16753 res=0 17:46:32 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x6) 17:46:32 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) openat$nvram(0xffffffffffffff9c, &(0x7f0000000440)='/dev/nvram\x00', 0x210500, 0x0) ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000200)={0x0, "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"}) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) r4 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) connect$caif(0xffffffffffffffff, &(0x7f0000000180)=@rfm={0x25, 0x14e, "9a9931ec51c4308cbc6467fdd825b974"}, 0x18) sendfile(0xffffffffffffffff, r4, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0xffffffc0) 17:46:32 executing program 0: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x7, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}]}, 0x40}}, 0x0) 17:46:32 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r1, r2, 0x0, 0x200fff) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r3, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000001c0)) set_mempolicy(0x8000, &(0x7f0000000100)=0x1cf20079, 0x20) write$binfmt_aout(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="10514f41291284113f37d6b3ca8ded49e7893658ed9c15ba722184fd7a08b812c12238eb490cf8a1c2b0ff801d0748d22c7cc84689e530ce484abc79dcc6c7e5853452c4b908cddcde2ec2cbca8df1546ce6f20ad933f2cfde5086fe0c4179"], 0xb) ioctl$ASHMEM_GET_PROT_MASK(r3, 0x7706, &(0x7f00000000c0)) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f0000000040)={{0x0, 0x81}, 0x0, 0x8, 0x400, {0x6, 0x9}, 0x5, 0xfffffffe}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x34}}, 0x0, 0x0, 0x0, 0x0, 0x495}, 0x20) [ 997.723133] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 997.765540] audit: type=1800 audit(1586540792.194:5131): pid=28150 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=16737 res=0 [ 997.821898] audit: type=1800 audit(1586540792.254:5132): pid=28148 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16721 res=0 [ 997.844275] Bluetooth: Invalid header checksum [ 997.850078] Bluetooth: Invalid header checksum [ 997.869495] Bluetooth: Invalid header checksum [ 997.873450] Bluetooth: Invalid header checksum [ 997.874427] Bluetooth: Invalid header checksum [ 997.893632] Bluetooth: Invalid header checksum [ 997.901771] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 997.921078] audit: type=1800 audit(1586540792.324:5133): pid=28152 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16721 res=0 [ 997.949190] Bluetooth: Invalid header checksum [ 998.045186] audit: type=1800 audit(1586540792.474:5134): pid=28148 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16721 res=0 17:46:34 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES32, @ANYPTR64, @ANYRESHEX, @ANYBLOB="66bd153d9fca1f3d4ada8d641bd79bfc8d335a6cb07aba4492632ecf507ea5d58ff571fc0ea2005c2477a68b56286de7f6c39a20c4a03b0c12717f48e1c462ad12892885fb00598926e239e47a64d134e0856ec4babf8a91f13855c38d909045406c0d59e33fd28972bb492830f4e6ce007e6e91b0a5d7f8da81d7e4e6d84e0818cd9ef6aea2c58c2da5ba2053a5d31861b8c39d8e331fce650c08d036bc9abb8365d87261a5fa5ede2c"], 0x0, 0xc8}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x4}, {&(0x7f0000000000)=""/6, 0xffffffffffffff2c}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:46:34 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000001c0)) write$P9_RWSTAT(0xffffffffffffffff, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x6) 17:46:34 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0xa, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}]}, 0x40}}, 0x0) 17:46:34 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0xa, 0x6) close(r1) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r1, r2, 0x0, 0x200fff) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req={0x112, 0x2, 0x6, 0x7fffffff}, 0x10) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGETMODE(r3, 0x4b3b, &(0x7f0000000080)) syz_mount_image$ocfs2(&(0x7f00000000c0)='ocfs2\x00', &(0x7f0000000100)='./bus\x00', 0xfff, 0x6, &(0x7f0000001400)=[{&(0x7f0000000140)="d830c0acdff354a318ba18fb9ef476625f6508c513f43369a6b3a97bd88abab22eb3d4ba19c477e7e0f6cff84391c9e06ef5eb96d33d7020c4c6086e6dabb2ebdc2f50a514f96f48b68b5b7041e11c8b2c9d1f125dc67058fe3ba56538f259e03daa371c963c14aba45a574f0be983c8cc40c97a7279c7c77260d02fc1c7fe727c15b12001645c80d989ea8d2348f67c4f9106ce66c7e81de91569f4756d777afec443b9c2529c382f355e12f886e482e54d1bce741c15bd52ac74d9615d0088a15f3ef14f84f053536676a2a8f5bcfa63ea7fdb9140c11a8f1e89e1581585", 0xdf, 0x2}, {&(0x7f0000000240)="1618c00c90c22af30f2a7c55d6f21588735813087fb202455ac1e716affc5fa756a0ba5f48d02bd5b861bb6a3e342dc15d33641b1689e23726c463483f53b54f2223e2e01c339dab9a1e35b07b32715cfbb6cef04a2ebfc9d1c14e3400dfca4ffbddf814b078ba20bbe17ca9f7d4ccd401657fec39f9251a59f4aee7000d8127792977e7879b7f97224f0989216e354ca803e6f3b77d6cf44df66f37e0a90ff7321b009aebbdb03e37a577cc5657a0e8bf0f530e79e4db57df250c1bbe942fc293fb60fe38e146c2fd8290636a125166dd302a5e66896cd42463ad5171064b8ff215282c239fb5f5a16517557c33e60641c14b4a", 0xf4, 0x1}, {&(0x7f0000000340)="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", 0x1000, 0x8}, {&(0x7f0000001340)="cc90947a779ffb8d6d313b42ec4d2b92bbad01b29c423fed9ac35f93a623e34bbf0b403d5bf6103500b97b0df510", 0x2e, 0x6}, {&(0x7f0000002040)="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", 0x1000, 0x9}, {&(0x7f0000001380)="ea7ef0942980eef704dc51dfc8ce33ed674332b497afe7017b5fe6a24467918ba2fef32ecfada8fb387626172b0e63a5fc2fb4794b23b61f3b5fd7d9b334e8dd5742d867c15336413665d6fd7aa1519b4164428c9bff7fa34e66d15719f1e0a619576f3103954d60977afa4b88752a7e82a8", 0x72, 0x3ff}], 0x400, &(0x7f00000014c0)=',/cpuset:trusted\x00') setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @multicast1}}, 0x20) 17:46:34 executing program 0: clock_gettime(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r0, r1, 0x0, 0x200fff) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0x0) 17:46:34 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x200c0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mISDNtimer\x00', 0x10002, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000000)=r2, 0x4) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r3, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x6042040) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)) r4 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0xffffffc0) [ 999.688721] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:46:34 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000001c0)) write$P9_RWSTAT(0xffffffffffffffff, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x6) 17:46:34 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}]}, 0x40}}, 0x0) 17:46:34 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000001c0)) write$P9_RWSTAT(0xffffffffffffffff, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x6) 17:46:34 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="10114f41291284113f22a3f4615f427ee2e9a2c78c1a2bb0f663040e15951e7cbd6d1925c49c3666c3c000f1b4ad340014d41cb495f175d1a587f63ac318cf1481b5c961d233457d14b0aabe8142f435946c96d1e14f8a44fcad000ca671b11056"], 0xb) ioctl$PIO_SCRNMAP(r2, 0x4b41, &(0x7f0000000200)="a166e2b4e78d45383e93eb15861baa69a8e98a95b870989261e5a89af507cb7c46e66cc1d9d56dcd341b7e91bf9c415616d1dca4e24bfa16f1c4c680d3b5768d51d52d01a018606932d826363384448aee9f5cbfd1479b461422fc6a5271fb331bedf7d360c217e02ffd77345b88573ec80e4ce623bf5d4b8075652159a3df1d67ff87fcdb27a77885da3aa17d84f2560c983a1374695a929c94b74aacf52bb8887f83ab440b963495411d0e71c42d37f59c02bbca3887322596") lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video1\x00', 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r1, r3, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0xffffffc0) 17:46:34 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) r2 = syz_open_dev$vcsn(&(0x7f0000000240)='/dev/vcs#\x00', 0x0, 0x671003) ioctl$UI_DEV_DESTROY(r2, 0x5502) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x6129d00b}], 0x1, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f9c) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) 17:46:34 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @multicast1}}, 0x20) syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x8, 0x1) r1 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x200fff) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000140)=0x5, 0x4) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) r5 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r4, r5, 0x0, 0x200fff) r6 = socket$inet6(0xa, 0x400000000001, 0x0) close(r6) memfd_create(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4) r7 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0x200fff) getsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0xe) [ 1000.311351] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:46:37 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES32, @ANYPTR64, @ANYRESHEX, @ANYBLOB="66bd153d9fca1f3d4ada8d641bd79bfc8d335a6cb07aba4492632ecf507ea5d58ff571fc0ea2005c2477a68b56286de7f6c39a20c4a03b0c12717f48e1c462ad12892885fb00598926e239e47a64d134e0856ec4babf8a91f13855c38d909045406c0d59e33fd28972bb492830f4e6ce007e6e91b0a5d7f8da81d7e4e6d84e0818cd9ef6aea2c58c2da5ba2053a5d31861b8c39d8e331fce650c08d036bc9abb8365d87261a5fa5ede2c"], 0x0, 0xc8}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x4}, {&(0x7f0000000000)=""/6, 0xffffffffffffff2c}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:46:37 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x6) 17:46:37 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x20) 17:46:37 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0xe, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}]}, 0x40}}, 0x0) 17:46:37 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x200fff) r3 = add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f00000000c0), 0x0, r3) keyctl$get_persistent(0x16, 0x0, r3) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r5) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002040)=[{&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000001740)=[{&(0x7f0000000280)="ca85fb88b7eeeff4eb12b469e5bff988a050b124db6fa257bb609deedb3524108c3f87590d5cc3e37abd10c5af2efd09bff6d8f7e81eab844f2e918a5b6c34a1eee34148087be5a43d27dd6509d669bd7e114b1eb0cd3becf43327c22b05595734564d6374016b72f54643f86c5da7f597f46f7e9628c95b09ddc8e31d7f761bfc6f201f8aecc9be70a91b0d0e09de74f350ce6c2fd9b62a7137e50969d88d24bf9ea50903c4b8b675d40b2ac320", 0xae}, {&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000001340)="44d8e0a4c22117e8b3081b08179161eca508d9c15b5ff3c4b3a2a1647ea8f025683c16639cef8b61c169fbed92ca590860a2c0d371c506d89dd1aa30616567aeea92846359b2ebc2ec59cfeb8212e3905e5b6fb5", 0x54}, {&(0x7f00000013c0)="182235f0e250b9e1928bd7f5231b1e16f0277acf799009727b7ab14ed003ba9f013a8b23addc4af0c9fb5622f0cb87036a91135a6d5db82d9d31f9b462414d2f5ab39e32f4b337dcd5aeb926a05a0e65e20c5e52f9c48eeea21c2c4696767e575d2872e1664121683edecef7af24bc57ba26de3669aff388e876c5d1b20e2ab7b006d4ebcf921d827335cf94f7ad0cdfd90dae8b8e23266b575d134b8da2d0324e30568d", 0xa4}, {&(0x7f0000001480)="ff905c5273961122efa946b5e7e6f706a403080fdeaba867cdec093d9a150476b7f3639d0561c01c4ffc789177b2ed4aab6f93fd3deb489fb264f73170bfa91a8aca969179", 0x45}, {&(0x7f0000001500)="2ee774ce02ecddfd2bc6ad0cf85eb45edab6b61d7b4e802f79135e72ed2c6e1778f147536f1941fac45f8aa6dde1c7db586b976e4d1bf04a22224dd9f8625404ffcaff6768eb113fd207e473e4c552617e980c2c2e57544c6afc05d8", 0x5c}, {&(0x7f0000001580)="ae2a7d460f8929edb3c1603d4703f4ef9cf03d97cf7177200cce61ab3ba89203a90be659de83cfa25b1474fc866c8e0a056a6b5925b693ab8f3b521ff3b9e85d96b34ebed30c5aebe989040f90e8ff67af4839695fb823807ef5e1a10eb6853446006f0bbec47479b9d9305400afd0f35dd489aadbd5f3003888802c7a27cabf063d14c1e140c2b0a7b2ec29a23f82d1af360ff8250622f9aefcec6f1ef44acd02a4e513bff7e0193ceb91d329b1d8da8c003e8d45beaeedc851709e8eb0bb80cc478dbfd12593dfe11c1e1c38", 0xcd}, {&(0x7f0000001680)="62dc2c94e8b7edc2311f2c9ca00979d0523c1ad5925be0e6495382c50dad6a275adc9c9baa98ca5179edbc9968d73d783d246bf1db17b16a37ddc958748d9f8571c74cb236f1d9e2ce464c38336a1f12058d17b86648028193874812f90cab4ca2ab45727c8c601a922510ca1f7737160d6ffc7eb393144bd82c6d4bd356fb358cf067edf0c7bf92c8bf38be", 0x8c}], 0x8, &(0x7f0000001800)=[@cred={{0x1c}}], 0x20}, {&(0x7f0000001840)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001c80)=[{&(0x7f00000018c0)="eadfe366f2149d214d4fe78a40cf5c213effdd882ebfd465ff31808dbd95f9dad44aefb25dd3837fa67aa2910b5e12e769feab0740c573054565987992297563aff3a36b31f7e9dae01bf618cb422cf805c9db2a47fe4d8dcb04c8b53eb0e73ad96de8268e965415b108", 0x6a}, {&(0x7f0000001940)="91a6b20e8f7c88fdbbd556c8217cc53c4375c283c8b024c4337bc2e6c81c8bfef32ea83da21aa748e0196dca754553700259876ae965243eaeb5eaa90713fca0abd3c4f5a10865c061d64627ad4a79f6ef14f07f876b6ef412f49c809ea00bcf3e1d374bb51ce5c17d91f75e8f4ecc8a8b22fa6c5aea1b1fb99bc3820d45a4cc43ba531a4eee1753e60edc5fc0f8c989c4eee2d8b20971fc0ed8e9a6a23aa7a1814f7c7b6b8e81495b2c441cc7b5ac6b596ed6b53cac7804ee00086faf2c129e3554b2a413a07b2cfce7fce2e3f318c079966ca845962a9c8d650bb7", 0xdc}, {&(0x7f0000001a40)="8fface63976ba8307543155fd9bcbafedf400bb1408df4e8f0176f", 0x1b}, {&(0x7f0000001a80)="0fa06f7925f651623f33aaa9bd2240ca4a1e6745264c6e7fb9020c6e66c34df455402b684fff1a904717c6ae12364837cce56c3ed4", 0x35}, {&(0x7f0000001ac0)="06b713eb61422d2dc14bda32e172a75a71a5d4621a779aaa0917d74b8e47f8108fc79ada8b3a2f5b68e219ff4ab3cf2074869e666569318c4b98fdf8003274bf23e00c494f9ddc196d74772eb955f4ebc347d73d9d7ae73542359b8365649164e533a21f6cb7d45be4080dd510bc08e4eb3305940e88542a876834fba1213ace29eae4e38d8ccc6ccb971f0ea939690bef0c6921ca3140ba5b0925db87710408d065abe79dda9853e1608d895a1b84f621ec8caf89801ec8f152dfaf64b8", 0xbe}, {&(0x7f0000001b80)="9a45136462afc046fbce3b6249b11e1622a8c57d6ffb32c2cc356953fa4040149d062e28639de35c557c7a2d8f4b1a87fac78073ab29e66ee86aa1ccfff2bdfb780eaf88f3513f4f98289837dafe8de84db560782d47f6e2fffbc26dbadf9080003b2878cb8078f7e5a97efe9dd674988c836f30545cac21a4258ec2ce7b7f4539b919294c324e184a8c2ca13ed48f676bc126b71a13216ddd76d0b5233e591001f58c284781fb31e2e06e475b0599c9a594796694651fd4dbf721c690437352e045fa318f27f53656a65133edd757b3ea68", 0xd2}], 0x6, &(0x7f0000001dc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80, 0x20000011}, {&(0x7f0000001e40)=@file={0x8b871cd77cd100c4, './bus\x00'}, 0x6e, &(0x7f0000001f80)=[{&(0x7f0000001ec0)="ef33515d4da8a7f0cc7ad74a9eae3234174dc22e3ab9b82aa9b7dee31ffc483d156f6755c2852c0248020c18a58703b792e4c9f067e3ae536c443fdf0a7b78c8882b01ed9c3700d16fa72ef696371a8d2cd351eca9c1185f43f734cd2f75552fb57cf351490c048997d59e1bc9340000eaf53473b59e0e62506d01caf22708565651", 0x82}], 0x1, &(0x7f0000001fc0)=[@rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r5}}}], 0x38, 0x40000}], 0x3, 0x20000804) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0xffffffc0) 17:46:37 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r1) r2 = socket(0x10, 0x0, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r4 = add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f00000000c0), 0x0, r4) keyctl$get_persistent(0x16, r3, r4) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r6) r7 = gettid() tkill(r7, 0x1000000000016) r8 = gettid() tkill(r8, 0x1000000000016) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r1, r3, r6, 0x79, 0xffff}, 0xd8f, 0x8, 0x91a, 0xd98, r7, r8, 0x2004}) 17:46:37 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x2, 0x2, 0x3, 0x0, 0x2, 0x8}, 0x20) [ 1002.815655] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 1002.824538] Bluetooth: hci0: Frame reassembly failed (-84) 17:46:37 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x6) [ 1002.919079] Bluetooth: Invalid header checksum [ 1002.919972] kauditd_printk_skb: 18 callbacks suppressed [ 1002.919986] audit: type=1800 audit(1586540797.354:5153): pid=28277 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16785 res=0 [ 1002.923752] Bluetooth: Invalid header checksum 17:46:37 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="10514f41291284113f37d6"], 0xb) ioctl$KDSKBLED(r0, 0x4b65, 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @broadcast}, 0x0, 0x0, 0x2, 0x2}, 0x20) 17:46:37 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r1, r2, 0x0, 0x200fff) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0xc) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r5 = creat(&(0x7f0000000180)='./bus\x00', 0x1) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r5, 0x0, 0x0) write$P9_RWSTAT(r5, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) r6 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0xffffffc0) [ 1003.098732] audit: type=1800 audit(1586540797.514:5154): pid=28282 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16785 res=0 17:46:37 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}]}, 0x40}}, 0x0) 17:46:37 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x6) [ 1003.263516] audit: type=1800 audit(1586540797.694:5155): pid=28296 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16201 res=0 [ 1003.299563] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 1003.334784] audit: type=1800 audit(1586540797.714:5156): pid=28296 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16201 res=0 [ 1003.438268] audit: type=1800 audit(1586540797.794:5157): pid=28296 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16201 res=0 [ 1003.486849] audit: type=1800 audit(1586540797.804:5158): pid=28302 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16201 res=0 [ 1003.595729] audit: type=1800 audit(1586540797.804:5159): pid=28296 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16201 res=0 [ 1003.622053] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 1003.635987] audit: type=1800 audit(1586540797.814:5160): pid=28302 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16201 res=0 [ 1004.838535] Bluetooth: hci0: command 0x1003 tx timeout [ 1004.855949] Bluetooth: hci0: Frame reassembly failed (-84) 17:46:40 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES32, @ANYPTR64, @ANYRESHEX, @ANYBLOB="66bd153d9fca1f3d4ada8d641bd79bfc8d335a6cb07aba4492632ecf507ea5d58ff571fc0ea2005c2477a68b56286de7f6c39a20c4a03b0c12717f48e1c462ad12892885fb00598926e239e47a64d134e0856ec4babf8a91f13855c38d909045406c0d59e33fd28972bb492830f4e6ce007e6e91b0a5d7f8da81d7e4e6d84e0818cd9ef6aea2c58c2da5ba2053a5d31861b8c39d8e331fce650c08d036bc9abb8365d87261a5fa5ede2c"], 0x0, 0xc8}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x4}, {&(0x7f0000000000)=""/6, 0xffffffffffffff2c}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:46:40 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x8100, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) r2 = open(&(0x7f0000000200)='./bus\x00', 0x20000, 0x15e) mmap$perf(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000003, 0x11, r2, 0x1) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0xc00, 0x0) ioctl$TCSETXF(r2, 0x5434, &(0x7f0000000180)={0x81, 0x9, [0x2, 0x8, 0x3, 0x6, 0x8001], 0x9}) sendfile(0xffffffffffffffff, r2, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0xffffffc0) 17:46:40 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x6) 17:46:40 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r0, r1, 0x0, 0x200fff) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000040)={0x1000, 0x2, 0x4, 0x20000, 0xcbc, {0x77359400}, {0x3, 0x8, 0x6, 0x9, 0xea, 0x0, "e4430d44"}, 0x4, 0x3, @fd=r1, 0x2, 0x0, 0xffffffffffffffff}) rt_sigprocmask(0x3, &(0x7f0000000180)={[0x20]}, &(0x7f00000001c0), 0x8) ioctl$KVM_GET_EMULATED_CPUID(r2, 0xc008ae09, &(0x7f00000000c0)=""/139) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket(0x10, 0x0, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r6 = add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f00000000c0), 0x0, r6) keyctl$get_persistent(0x16, r5, r6) r7 = socket(0x10, 0x0, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r9 = add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f00000000c0), 0x0, r9) keyctl$get_persistent(0x16, r8, r9) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000240)='./bus\x00', 0x2000000, 0x9, &(0x7f0000000900)=[{&(0x7f0000000280)="dc1685bfe6e18d6e9e20243c01f98bc6543b266ce7a47ce3d94e1dbaededdeefe2a64659316a9bce03f9eed767748e2760211426be1f17908a9d0cc47c16a621dfcf1687b2047a1ee1c7193721a9f5d235dfd061f24e7c73e84f4ff82e3052861102c770346cf999963d9adec6b42e8662389c4f746c00c2083ce1b7b7e8ebfc0789f86e9902e4417800a515c6ce85bd6aed42a69ae6592ac725361da9b636e87337763b82e971f5181f44dc6323951332a6364a69de5bc848a1ad59331b1a80359e552b90284d88cd7cfa814a681942cdc3b746348010a01dc6c33eb37ece06151ac8320fad5a570a71bf5ab378", 0xee, 0x7}, {&(0x7f0000000380)="9ac7628cc2ae8a5263824051f1c827bdd2280f90e8eddd6dab92560e0370b4d5392f7e7baffe74d60373a352c2f6c4213ede00b3f66ed6cb7ab0c1bb3d28316943c4dfa21d12619b8b1614644d79eee29e7b36b05434e1b255a340b988f446e326fb8b32bc", 0x65, 0x4}, {&(0x7f0000000400)="c96b78aa546d3ff651aa96dda450", 0xe, 0x5}, {&(0x7f0000000440)="d917425858e173fdb0798a253a0c2d536ae7df7541522e3229c50b525f77451d270ec19e16398ae50c1415fda35d5f41a06a57baee05ca9b12e3c93793e80aa77a89885bcf9a30b18e88c861ca3001137b52c6912007d758f1d27ecb4ebb7bb178380b0de4deaaef136df920637ebb7f895b56d8b9f3f011e811b01e19d86ab892c21092103868ff141fe06a1f5e", 0x8e, 0x5}, {&(0x7f0000000500)="556b96ef2dcb07e2eb8bea9149860700f180a160c317d366d01c547a2a3cd8393b671bf82774928bcac83028903c615d84c96d4e1c35c5d8d4afc52b75100723c169feb220bc0ef9dd9f0263237787925ddfa6447f563e48da28719599ab56f92ab75fc251ae3435531d2638478e130b9783bc933231a78791e03a5ddd10312fbf560124119a9f4cf92b44e4f585eb3abd68d554099422d9127bbf3c08d5dad637e280b742f4e65e95abdcb589baa6b31d361d2223e590a7c754044010c72339954f5e37f1c064b03f9d02d6848ea849d7f0c255f95b763ae8be60f2f138b122abac2fad", 0xe4, 0x4}, {&(0x7f0000000600)="aa50808cf562aa26fa5b48265a9cc1dcadabe254", 0x14, 0x5}, {&(0x7f0000000640)="17b5883df8a98b84e8251771851724cc21327214d8735fc680894a5a99e32e86ce199a512cf597f00016ecb935210e423dc49b7823873301fbbb10fc022cb2437d753d6f7727b837bf927524eb3f04118436b6afc811f30b6464000971fc5282c7f31d1358f01049aacbcf2e2b021414a5f95791fb27ec3dfdead611347d4f6f59d9f1d4a51afffa2292cb4a6c15885f148d2e97a67b9449b9cded130b150d928968bd39774b6ec5fe98a932e0f3c60b5f5e09e9191babda653d91c286a98351450647552e", 0xc5, 0x8}, {&(0x7f0000000740)="ffd8c216fb70de9207eab5f9d0fa770a1988604bbbee8005e56eb3904feaad90b944c27afe98273f057f010b6f92c0febd0ac492db0f65433b663606b1ef9f24ea86dba89047b69cb84a6f1ca4effc70625895f01addae248c117f6cab5f333a6d06dc4fea4dd419da884c70a9f407fea146d22d5b152e530ae698c51234240f11210c1d63dc121eb25a62831b15fe0c13180b", 0x93, 0x8e}, {&(0x7f0000000800)="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", 0xfa, 0x1ff}], 0x80, &(0x7f0000000a00)={[{@dots='dots'}, {@dots='dots'}, {@fat=@quiet='quiet'}, {@fat=@codepage={'codepage', 0x3d, '1255'}}, {@nodots='nodots'}, {@fat=@flush='flush'}, {@fat=@dos1xfloppy='dos1xfloppy'}], [{@dont_hash='dont_hash'}, {@fowner_lt={'fowner<', r5}}, {@dont_appraise='dont_appraise'}, {@appraise='appraise'}, {@seclabel='seclabel'}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@seclabel='seclabel'}, {@euid_eq={'euid', 0x3d, r8}}]}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @multicast1}}, 0x20) 17:46:40 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x2e, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}]}, 0x40}}, 0x0) [ 1005.878253] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 1005.925497] audit: type=1800 audit(1586540800.354:5161): pid=28333 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=16244 res=0 [ 1006.009314] Bluetooth: Invalid header checksum [ 1006.014767] Bluetooth: Invalid header checksum [ 1006.023218] audit: type=1800 audit(1586540800.424:5162): pid=28339 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=16244 res=0 [ 1006.908521] Bluetooth: hci0: command 0x1001 tx timeout [ 1006.928106] Bluetooth: hci0: sending frame failed (-49) [ 1008.988590] Bluetooth: hci0: command 0x1009 tx timeout 17:46:47 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setxattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="6f73322e6e6f64657281643573756d73656c0200ae6db1de756300"], &(0x7f0000000100)='\x80', 0x1, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="10514f41291284113f37d6"], 0xb) ioctl$USBDEVFS_DISCARDURB(r1, 0x550b, &(0x7f0000000040)=0x200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @loopback}}, 0x20) 17:46:47 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x6) 17:46:47 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x34, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}]}, 0x40}}, 0x0) 17:46:47 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000100), &(0x7f0000000180)=0x8) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) r4 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0xffffffc0) 17:46:47 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES32, @ANYPTR64, @ANYRESHEX, @ANYBLOB="66bd153d9fca1f3d4ada8d641bd79bfc8d335a6cb07aba4492632ecf507ea5d58ff571fc0ea2005c2477a68b56286de7f6c39a20c4a03b0c12717f48e1c462ad12892885fb00598926e239e47a64d134e0856ec4babf8a91f13855c38d909045406c0d59e33fd28972bb492830f4e6ce007e6e91b0a5d7f8da81d7e4e6d84e0818cd9ef6aea2c58c2da5ba2053a5d31861b8c39d8e331fce650c08d036bc9abb8365d87261a5fa5ede2c15ba50"], 0x0, 0xcb}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x4}, {&(0x7f0000000000)=""/6, 0xffffffffffffff2c}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1013.393022] kauditd_printk_skb: 2 callbacks suppressed [ 1013.393036] audit: type=1800 audit(1586540807.824:5165): pid=28371 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16251 res=0 [ 1013.429663] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 1013.528966] audit: type=1800 audit(1586540807.894:5166): pid=28371 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16251 res=0 17:46:48 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000740)=ANY=[], 0x0) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x2, 0x7, 0x0, 0x400000000000000}, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x6, 0x0, 0x0, 0xfff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x80, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000029d8dbfecb7d90064debf1f19645688e3953a733b69655e54571f0a2c06e67f6295b9a0fbca5473988e9e14ec0ace2b3ef7f80de72a22d6905e917d628b08ee6a98c73d781ed30da6c2a1c744ab62eccce4a523e4b9f147c18d1e5051f842a3efd9ff6bbd9541ba397b7ae8b016201218954be4e5d4619d391ed7f157c32b7e0c0c805742c4b5b4beb7ce5764294d572327da7fbe883bc6af698b265cc487f9f38845899b6a0d3a79216cbce000d", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket(0x10, 0x803, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f0000000380)) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32=r5, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="8e1a00"], 0x5}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x44, 0x2, [@TCA_RSVP_ACT={0x40, 0x6, [@m_gact={0x3c, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x25a6}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x71a}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x11bb, 0x20000000}}]}, {0x4}}}]}]}}]}, 0x74}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r12, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="8e1a00"], 0x48}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000024000705000000ddd335902838a41060", @ANYRES32=r12, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001f00)=@newtfilter={0x1850, 0x2c, 0xd27, 0x30, 0x0, {0x0, 0x0, 0x0, r12, {}, {0x8, 0x10}, {0x4}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x1824, 0x2, [@TCA_FW_POLICE={0x408, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x1, 0x0, 0x80000000, 0x7, 0x0, 0x9, 0x6ddcbce0, 0x2f, 0x93f, 0x7fffffff, 0x0, 0x0, 0x1, 0x8, 0xfffffff8, 0x1, 0xffffffe0, 0x1000, 0x4, 0x6a4, 0x0, 0x80000000, 0x9c, 0xf47e, 0x0, 0x8, 0xffff, 0x2, 0x5, 0x5, 0x5, 0x8, 0x8, 0x7fffffff, 0x3, 0x5, 0x6, 0x1, 0x3, 0x9, 0xcb61, 0x7fffffff, 0x3f, 0x8000, 0x3, 0x30000000, 0x330, 0xff, 0x2, 0x101, 0x50, 0x3f, 0x3f, 0x3, 0x200, 0x8000, 0xffffffff, 0x7fffffff, 0x7, 0x4cbbf884, 0x0, 0xb2, 0x20000000, 0x2, 0x5, 0x10, 0x32, 0x95f, 0x1f, 0xfffffffc, 0x8, 0x7fffffff, 0x4, 0x7c0, 0xffffffff, 0x1f, 0x0, 0x7f, 0x1d, 0x7, 0x3ff, 0x8, 0x1, 0x6, 0x8, 0x81, 0x6, 0x3, 0x1f, 0x8000, 0x3ff, 0x0, 0xd7b, 0x6, 0x20, 0xfff, 0x7, 0xffff10a7, 0x4, 0x7fffffff, 0x2ca8, 0x3, 0x4, 0x7, 0xcbee, 0x73, 0x5, 0x5, 0xa6, 0x7, 0x10001, 0x2, 0x2, 0xb6b8, 0xbc59, 0x3, 0x9823, 0x2d3, 0x1000, 0x3, 0x0, 0x4, 0x0, 0x8, 0x5, 0x1, 0x1000, 0x7, 0xfffffffa, 0x1, 0x6, 0x8, 0x5d, 0x0, 0x8, 0xdf58, 0x1, 0x0, 0x4, 0x0, 0x40, 0x40b5, 0x5, 0xfffffff9, 0x7, 0x3, 0x3, 0x800, 0x2f, 0x0, 0x8000, 0x3, 0xfffff97e, 0x1, 0xffffffff, 0x3, 0x2, 0x0, 0x7fffffff, 0x3, 0x3, 0x200, 0x0, 0x5, 0x8, 0x1, 0x4, 0x794c, 0x6, 0x3, 0x1, 0x40, 0x4, 0x8, 0xe60, 0x3f, 0x7ff, 0x54, 0x2, 0x800, 0x8001, 0x7f, 0x7, 0x4, 0x8000, 0x0, 0x401, 0x8000, 0x0, 0x1, 0x1f, 0x6, 0x5, 0x0, 0x3, 0x182, 0xcc, 0x3, 0x9, 0x40, 0xfffffe00, 0xf, 0x5, 0x8, 0xb177, 0x800, 0xa794, 0x80000000, 0x0, 0x1, 0x3, 0x1, 0x7, 0x2, 0x400, 0x68599940, 0x400, 0x8, 0xc2a8, 0xe7, 0x81, 0x6, 0x1, 0x6, 0x5, 0x4748, 0x3ff, 0xfffffffa, 0x8, 0x8, 0x1, 0x20080, 0x5, 0x2, 0x5, 0x7, 0x4, 0x8, 0x5, 0x9, 0x2, 0x100, 0x7f, 0x6, 0x200, 0x2, 0xffff, 0x6, 0x10000, 0x81, 0x101, 0x81, 0x69, 0x7, 0x1]}]}, @TCA_FW_POLICE={0x844, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x10001, 0x8d7, 0x7, 0x7ff, 0x1, 0xfffffbff, 0x9, 0x8, 0x3, 0x6, 0x1, 0x7, 0x0, 0x61, 0xfffffffb, 0x7f, 0xcf, 0x40, 0xfffffff7, 0xedc5, 0x7, 0x80000000, 0x80000001, 0x1f, 0x1, 0x5, 0x9, 0x8, 0x4, 0x40, 0x9, 0x3, 0xad, 0x81, 0xffffffff, 0x7fffffff, 0x8000, 0x200, 0x3, 0x1, 0x1, 0x7, 0x8, 0x5, 0x1, 0x7, 0x800, 0x4, 0x0, 0x10000, 0x4, 0x9, 0x1, 0x3, 0x5, 0xffff, 0xc9f, 0x2, 0x0, 0xffff7fff, 0xffffff1a, 0x4a45885a, 0x702c, 0x10, 0x1, 0x784, 0xffffff80, 0x1ff, 0x400, 0x42b4e6d9, 0x8cb0, 0x1, 0x7fff, 0xfffffffd, 0x8, 0x0, 0xfff, 0x5, 0x200, 0x40, 0x8, 0xe71a, 0x20, 0x9, 0x6, 0xaba, 0x66, 0x74, 0x7, 0x4, 0x8, 0x1, 0x3, 0x9, 0x1, 0xce6c5f48, 0x0, 0x8, 0xffffff63, 0x5, 0x0, 0x1, 0x7, 0x0, 0x80000000, 0xe5, 0x8, 0xfffffff7, 0xd73, 0x8000, 0x6, 0x80000002, 0x100, 0x8, 0x8, 0x8, 0x45e6, 0x8, 0x4, 0x0, 0x1ff, 0x0, 0x800, 0xfffff000, 0x4, 0x7, 0x9, 0x4f, 0xff, 0x401, 0x10000, 0x4, 0x9, 0x401, 0x9, 0x101, 0x9, 0x62f1, 0x7fff, 0x8000, 0x9, 0x3, 0x1, 0x7, 0x0, 0x1f, 0xa3c, 0x90000000, 0x71b, 0x8, 0x7, 0x7, 0x9, 0x9, 0x7fff, 0x10000, 0x8, 0x7, 0xffff, 0x17, 0xfffffd6c, 0x7fff, 0x9, 0x81, 0xb2, 0x0, 0x0, 0x3ff, 0x7, 0x1, 0x1, 0x0, 0x5da1, 0x20, 0x4, 0xffff, 0x40, 0x0, 0x81, 0x2, 0x1, 0x9, 0xbfb, 0x3f, 0x6, 0x401, 0x40, 0x1, 0x5, 0x4, 0x8, 0x7fff, 0xf7, 0x10001, 0x101, 0x0, 0x3, 0x4, 0x8, 0x800, 0x7a0e, 0x0, 0x0, 0x45, 0x7, 0x1000, 0x9, 0x6, 0x3, 0xfffffffc, 0x20, 0x4, 0x1f, 0x4, 0xffffffff, 0x8, 0x1ff, 0x1, 0x0, 0x6, 0x7f, 0x3ff, 0x0, 0x4, 0x5, 0x9, 0xfffffe00, 0x7fff, 0x4, 0x80000001, 0x1, 0x7ff, 0x7c6b, 0x7, 0x3, 0x2, 0x0, 0x7, 0x5, 0x80, 0x7fffffff, 0x7, 0x3, 0x8001, 0xffffffff, 0x352, 0xd8b0, 0x3, 0x9, 0xf4fd, 0x1, 0x4010, 0x7, 0x800, 0x5, 0x200]}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x19}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffffa, 0x10001, 0x6, 0x6, 0xb569, 0xbd6, 0xbde8, 0x80, 0x6c, 0x8, 0x48169665, 0x9, 0x100, 0x1, 0x400, 0xffffffff, 0x6, 0x4, 0x2, 0x1, 0x3, 0x2, 0x7, 0x1, 0xf532, 0xffffffff, 0x7ff, 0x2, 0x0, 0x8c74, 0x2, 0x8, 0x1, 0xfffffb13, 0x40, 0x9, 0x7a, 0x200, 0x4, 0xfffffff8, 0x200, 0x0, 0xf58c, 0x8000, 0x80, 0x5, 0x1, 0x6, 0x9, 0xff, 0x7, 0x7ff, 0xfd, 0xbc2, 0x6, 0x20000000, 0x9, 0x81, 0x7fffffff, 0x100, 0x2c6, 0x5, 0x230, 0x8, 0x9, 0xffffffff, 0x1, 0x3, 0x0, 0x9, 0x0, 0x400, 0x400, 0x1000, 0xfff, 0x7, 0x2, 0x6, 0xffff, 0x9, 0x8001, 0x1ff, 0x0, 0x6, 0x0, 0x3ff, 0x0, 0xffffffff, 0x80000000, 0xffffff22, 0xfffffffe, 0xffffffe0, 0x80000001, 0x800, 0x7, 0x9, 0x7, 0xad3, 0x101, 0x800, 0xdc, 0xde, 0x400, 0xffff, 0x9, 0x3, 0xffffff80, 0x100, 0xfffffff8, 0x8, 0x56, 0x1, 0x4, 0xfffffff7, 0x3, 0x1000, 0x4, 0x7, 0x3, 0x9, 0xbd20, 0x1f, 0x6, 0x10000, 0x2, 0x4, 0x0, 0x80000001, 0x74000000, 0x4, 0x6, 0x7fffffff, 0x5, 0x1f, 0x1, 0xab, 0x9066, 0x2, 0xcd8, 0x40c, 0x1020000, 0x0, 0x4, 0xb9, 0x4, 0x8000, 0x20000000, 0x6, 0x101, 0x0, 0x0, 0x4, 0x7fff, 0x2a2af7d5, 0x8, 0x5, 0x10001, 0x1, 0x3, 0x7, 0x3, 0x6, 0x81, 0x0, 0x8, 0xffc00000, 0x7fffffff, 0x2, 0x0, 0x8000, 0x3, 0xbf8f, 0x7a2, 0x1b, 0x0, 0x2, 0x3, 0x1, 0x8, 0x80, 0x2, 0x3, 0x8, 0x7497, 0x4, 0x4, 0x5, 0x6, 0x8001, 0x1, 0x3, 0x8, 0x7, 0x4, 0x7fff, 0x960b, 0x3, 0x3ff, 0x3, 0x5, 0x0, 0x1ff, 0x2, 0xf446, 0x101, 0x3438, 0x178, 0x9, 0x2, 0x5cb1, 0x1f, 0x800, 0x100, 0x1f, 0x5, 0x7, 0x5, 0x400, 0x401, 0x80000001, 0x2, 0x4000000, 0xffffffff, 0x7fffffff, 0xd92e, 0xffffff1b, 0x7fffffff, 0x27, 0xfff, 0xa5c, 0x1000, 0x7, 0x80000001, 0xffffffff, 0x20, 0xffff6763, 0x401, 0x5, 0xc0, 0x2, 0x1, 0x2, 0x2a, 0x7f, 0x7ff, 0x7, 0x2, 0x0, 0x2, 0x6, 0x1b, 0x101, 0x0, 0x2, 0x200, 0x81]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3ff}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}]}, @TCA_FW_POLICE={0x81c, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x7fffffff, 0x3, 0xcc0, 0x1, 0x4, 0x40, 0x7ed, 0x6, 0x85, 0x486, 0x6, 0x1, 0x5, 0x0, 0x7, 0xa0e1, 0x9, 0x6, 0x8, 0x9, 0xfffffffc, 0xfb, 0x2, 0x8001, 0x7, 0x80000000, 0x6, 0xe4, 0x3, 0x1, 0x5, 0x7, 0x10001, 0x4, 0x4, 0xbb0e, 0x0, 0xfffffffa, 0x8000, 0xffffffc1, 0x3, 0x8, 0x8000, 0x101, 0x7, 0x7ff, 0x1, 0x0, 0x3, 0x8001, 0x6, 0x8d30bb3e, 0x537, 0x9, 0x9, 0x3f, 0x2, 0x7, 0x40, 0x2, 0x3, 0x8000, 0x3, 0x2444, 0x7ff, 0xfffffffb, 0x1f, 0x3, 0x5, 0x7, 0x4, 0x5, 0xaf7f, 0x9, 0x9, 0x2020, 0x7, 0x8, 0x800, 0x9, 0xb3, 0xbaf, 0x9, 0x4, 0x4, 0x6, 0x1, 0x8, 0x80, 0x8000, 0x3, 0x8, 0x4353, 0xfff00000, 0xfff, 0x29c, 0xcb21, 0x9, 0x7, 0x1f, 0x9, 0x0, 0x1, 0x81, 0x5, 0x3, 0x3, 0x0, 0x5, 0x101, 0x5, 0x6, 0x6, 0x57000, 0x48c47a4a, 0x1f, 0x2, 0x4, 0x3, 0xffffffff, 0xfff, 0x4, 0x7, 0xfffffffe, 0x640, 0x3, 0x6, 0x3, 0x40, 0x3, 0x106b, 0x0, 0x1f0000, 0x6, 0xfffffffe, 0xfff, 0x3, 0xf7, 0x79aa, 0x1f, 0x7, 0x35b21597, 0x101, 0x1a, 0x7ff, 0x7, 0xab, 0x82, 0x3ff, 0x4, 0xffff, 0x7, 0xfff, 0x9, 0x5, 0x400, 0x1000, 0x2, 0x6e, 0x5, 0xfffffff7, 0xffffffc0, 0x5, 0x6, 0x0, 0x82, 0x7, 0x5, 0x4, 0x1, 0x1, 0x3, 0x633e43d9, 0x9, 0x1, 0x196d, 0x1ff, 0x5, 0x2, 0x400, 0x3ff, 0x3, 0x6, 0x7, 0x3, 0x1, 0x1, 0xffff611a, 0x8, 0x3, 0x3ff, 0x5, 0x4, 0x4, 0x2, 0x800, 0x7fff, 0x7fff, 0x0, 0x6560d70d, 0x7, 0xd7, 0x2, 0x4, 0x32a, 0x58dc0, 0x7f, 0x80, 0x9, 0x8, 0x9, 0xe, 0x0, 0x4, 0x0, 0x1, 0x4, 0x8, 0x8, 0x9, 0x1, 0x3ee, 0x5, 0x9, 0x0, 0x6, 0xffff, 0xfffffffa, 0x16, 0xf6a, 0x401, 0x5, 0x9, 0x7ff, 0x3f, 0x9, 0xaf4, 0x9, 0xffffffff, 0x8a30, 0x3, 0x0, 0x7cd58b61, 0x7fffffff, 0x1, 0x400, 0xfffffe01, 0x4, 0xffffb95b, 0x78f8, 0x20, 0x6, 0x0, 0x0, 0x40]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfffffffc}, @TCA_POLICE_RESULT={0x8, 0x5, 0x538}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x200, 0x8, 0x1f, 0x0, 0xfffffffc, 0xffffffff, 0x401, 0x3, 0xfffffc00, 0x4, 0x9, 0x5, 0x1, 0x200, 0x4, 0xfa41, 0xffff0001, 0x8, 0x3ab9, 0x1, 0x6, 0x8001, 0x1, 0x7, 0x3, 0x9, 0xc3, 0x7fffffff, 0x4, 0x1, 0xffff, 0x7f, 0x6, 0x57, 0x2, 0xffffffb3, 0x800, 0x10, 0xf124, 0x400, 0x3, 0x7c19, 0x8, 0x9, 0x875a, 0x8, 0x2, 0xfffff217, 0x4, 0xfffff801, 0x9, 0x7, 0x8, 0x524e, 0x684, 0x400, 0x1, 0x1, 0x8, 0x6, 0x3ff, 0x83, 0x400, 0x1, 0x7fffffff, 0x3, 0x6, 0x4443, 0xb2, 0x4, 0x0, 0x240, 0x0, 0x0, 0x10000, 0x3, 0x0, 0xffffffff, 0x7fff, 0x80000001, 0x3, 0x1, 0xa3, 0x3, 0x9, 0x1ff, 0x0, 0x3ff, 0x7fff, 0x1, 0xfffffff8, 0x9, 0x80, 0x1000, 0x4, 0x81, 0x1ff, 0x5, 0x7, 0x2, 0x6, 0x93, 0x9, 0x3, 0x9, 0x7e954a38, 0x10001, 0x7, 0x101, 0x100, 0xef46, 0x4, 0x4, 0x80, 0x100, 0x7, 0x8, 0x1, 0x4, 0x2, 0x7, 0x7fff, 0x8, 0xfffffffe, 0x6, 0xff, 0x8, 0x1f, 0x5, 0x5, 0x80000001, 0x101, 0x1, 0x0, 0x9, 0x40, 0x1ff, 0x4, 0x2, 0x8000, 0x0, 0xffff, 0x6, 0x7, 0x3, 0x20, 0x4, 0x4, 0x8, 0x101, 0x1f, 0x1, 0x2, 0xde42, 0x0, 0xf04f, 0x7, 0xbe, 0x0, 0x2, 0x40, 0x25f, 0x5, 0x6, 0x3d6, 0x3f, 0x2, 0x101, 0x7f, 0x1, 0xfffffffa, 0x4, 0x2, 0x7, 0x1, 0x100, 0x3, 0x101, 0xffffffff, 0x5, 0x2, 0xf4, 0x80000001, 0x4, 0x80000000, 0x2, 0x2, 0x2, 0x28a, 0x3ff, 0xfffffe00, 0x8001, 0x46f, 0x2, 0x4, 0xdc, 0x6, 0x8, 0x1, 0x346, 0x2, 0x6, 0x0, 0x7fff, 0x8, 0x183, 0x3, 0xfff, 0x6, 0x3f, 0x275, 0x4, 0x0, 0x1, 0x2, 0x8, 0x3, 0x0, 0x7, 0x8, 0xe016, 0x0, 0x100, 0x6b9, 0xc2, 0x8, 0x0, 0xfff, 0x804, 0x7, 0x7, 0x8, 0x80000000, 0x3ff, 0x4, 0x3f, 0x4, 0x4, 0x400, 0xbcf, 0x8001, 0x2, 0x360, 0x7ff, 0x5, 0x0, 0xfffffffb, 0x7, 0xffff82c5, 0x8001, 0x6, 0x4, 0x8, 0x0, 0x81, 0x7fffffff]}]}, @TCA_FW_INDEV={0x14, 0x3, 'wg2\x00'}, @TCA_FW_ACT={0x380, 0x4, [@m_ctinfo={0x80, 0xb, 0x0, 0x0, {{0xb, 0x1, 'ctinfo\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0xe517, 0x5, 0x20000000, 0x9, 0xf8}}]}, {0x54, 0x6, "3975b2fd76b2cb5bf49d5d6cb87587f723cdda4c0e901a95c95a482d738a738b68b406bb3717f5d344e9a5397c32b430a9c43e46dd48390139d04f738b938b1e72dba172c260e302f41c6de4adb2d8d8"}}}, @m_simple={0x80, 0x9, 0x0, 0x0, {{0xb, 0x1, 'simple\x00'}, {0x34, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x4, 0x5, 0xffffffffffffffff, 0x72, 0x2}}, @TCA_DEF_PARMS={0x18, 0x2, {0x3, 0x200006, 0xffffffffffffffff, 0x5, 0x5}}]}, {0x3c, 0x6, "ce434020f7226dfe24e77914ba7fcf5b72d5e80508a62cb49f1e4a251bc395f995082777720f16173c29972939926ca54701bc2a5d072046"}}}, @m_sample={0x88, 0x17, 0x0, 0x0, {{0xb, 0x1, 'sample\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x7, 0xffff, 0x3, 0x4, 0x3}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x348a}]}, {0x51, 0x6, "fc32ce1721cc46accbd78dc33974ed0aa9ea434d7ca1e48d48833b66e118745ddb35db96f292e89c80f479fe0814b43beb2f91d77f94399f3d265884329c8678039340cbd5c4e251d97a32ce13"}}}, @m_mirred={0xd0, 0x2, 0x0, 0x0, {{0xb, 0x1, 'mirred\x00'}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8000, 0xda40, 0x2, 0x1, 0x7}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x5, 0x0, 0xfffffe01}, 0x2}}]}, {0x7b, 0x6, "a41a81cf3b9b86725b80f74483f83228316d6eef260bf6cd4fc124a360521306566986fbfd4fd2130ab030fa59178b85fd8b5728b11280257af2f91b148884ee00f74cf7b57f468575705784375ee266fc99070c4b85350f853c3329e242340dc64c18078c5be7f031ce9e494867c939ca055110cf0ef4"}}}, @m_simple={0x124, 0x15, 0x0, 0x0, {{0xb, 0x1, 'simple\x00'}, {0x74, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x9, 0xffffffffffffffff, 0x8, 0xfff}}, @TCA_DEF_PARMS={0x18, 0x2, {0xffff7fff, 0x3, 0x5, 0x3f, 0x8001}}, @TCA_DEF_PARMS={0x18, 0x2, {0x4, 0x6, 0x7, 0x4, 0x3}}, @TCA_DEF_DATA={0x15, 0x3, 'wlan0selinux@em0\x00'}, @TCA_DEF_DATA={0x7, 0x3, '\x8d{\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0x9f, 0x6, "74feb34569b83b9baffbf84e0bf17d1682f3cb46d54b1278f1615d10d41c59444b33934f95a9c5fb9654f7a76835e0cba96be52bd074ac693d404dd8f946b3d30f55ab2f93f8138df9ade5b6e07f946333fb5bb2ac1b595fbee9ef04a32a5f748e5ce78a6ac79f7d777b487c522e5848c3404f8c2baf9ee5ca96e1340fe2cad241d7ebe24e2b9565b68416c7646950f2a1e7792f5b247150901755"}}}]}, @TCA_FW_INDEV={0x14, 0x3, 'erspan0\x00'}, @TCA_FW_CLASSID={0x8, 0x1, {0x8, 0x15}}, @TCA_FW_MASK={0x8, 0x5, 0x1}]}}]}, 0x1850}}, 0x0) 17:46:48 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r0, r1, 0x0, 0x200fff) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000100)={0x16, 0x98, 0xfa00, {&(0x7f0000000040), 0x3, r2, 0x10, 0x1, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}}}, 0xa0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r3, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000001c0)) r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) r5 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r4, r5, 0x0, 0x200fff) write$binfmt_aout(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="10514f41291284113f37d6", @ANYRESOCT=0x0], 0x22) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=r6, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x8, 0x8205, 0x0, 0xffffffff, r6}, 0x10) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000001c0)={r6, 0x59ee}, &(0x7f0000000200)=0x8) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @multicast1}}, 0x20) 17:46:48 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x6) [ 1013.645490] audit: type=1800 audit(1586540808.014:5167): pid=28384 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16251 res=0 17:46:48 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x3a, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}]}, 0x40}}, 0x0) 17:46:48 executing program 0: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000340)='./bus\x00', &(0x7f0000000440)) fchownat(0xffffffffffffffff, &(0x7f0000000140)='./bus\x00', 0x0, 0x0, 0x800) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r3) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x40, 0x0) write$FUSE_DIRENT(r4, &(0x7f0000000040)={0x68, 0x0, 0x1, [{0x0, 0x4, 0x0, 0x800}, {0x0, 0x1, 0x7, 0xfffffc00, 'trusted'}, {0x2, 0x2, 0x2, 0x7ff, '&:'}]}, 0x68) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) [ 1013.813747] audit: type=1800 audit(1586540808.044:5168): pid=28371 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16251 res=0 17:46:48 executing program 5: r0 = accept(0xffffffffffffffff, &(0x7f00000000c0)=@l2={0x1f, 0x0, @none}, &(0x7f0000000140)=0x80) connect$ax25(r0, &(0x7f0000000180)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default]}, 0x48) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @multicast1}}, 0x20) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000040)=""/128) 17:46:48 executing program 3: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x2) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)) write$P9_RWSTAT(r0, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200fff) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000100)=0x6) [ 1013.958223] audit: type=1800 audit(1586540808.124:5169): pid=28390 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=16252 res=0 [ 1014.006687] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 1014.024605] audit: type=1800 audit(1586540808.194:5170): pid=28390 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=16252 res=0 17:46:48 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xc0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=0x7ff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x1, 0x1}, 0x0, 0x0, &(0x7f0000000140)={0x4, 0xe, 0x2, 0x1000}, &(0x7f0000000180)=0x7, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=0x7ff}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r2, 0x4) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r3, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="10514f41291284113f37d6"], 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1a, 0x7, &(0x7f0000000100)=@raw=[@ldst={0x0, 0x2, 0x2, 0x8, 0x6, 0x0, 0xfffffffffffffff0}, @generic={0x5, 0x5, 0x6, 0x5, 0x9}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}], &(0x7f0000000180)='syzkaller\x00', 0x10001, 0xf3, &(0x7f0000000200)=""/243, 0x41000, 0x7, [], 0x0, 0xa, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0xc, 0x3, 0x41}, 0x10, r2, r3}, 0x78) r4 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0xffffffc0) 17:46:48 executing program 3: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x2) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)) write$P9_RWSTAT(r0, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200fff) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000100)=0x6) 17:46:48 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @multicast1}}, 0x20) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r1, r2, 0x0, 0x200fff) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=r3, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, r3}, 0x10) setsockopt$inet6_dccp_int(r1, 0x21, 0x4, &(0x7f0000000100)=0xcf8, 0x4) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000040)={r3, @in6={{0xa, 0x4e22, 0x50a72732, @empty, 0x2}}}, 0x84) [ 1014.192658] audit: type=1800 audit(1586540808.194:5171): pid=28394 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=16252 res=0 [ 1014.327426] audit: type=1800 audit(1586540808.754:5172): pid=28434 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=16259 res=0 17:46:48 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x48, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}]}, 0x40}}, 0x0) [ 1014.540464] audit: type=1800 audit(1586540808.804:5173): pid=28436 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=16259 res=0 [ 1014.631859] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 1014.665753] audit: type=1800 audit(1586540808.864:5174): pid=28433 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16262 res=0 17:46:50 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES32, @ANYPTR64, @ANYRESHEX, @ANYBLOB="66bd153d9fca1f3d4ada8d641bd79bfc8d335a6cb07aba4492632ecf507ea5d58ff571fc0ea2005c2477a68b56286de7f6c39a20c4a03b0c12717f48e1c462ad12892885fb00598926e239e47a64d134e0856ec4babf8a91f13855c38d909045406c0d59e33fd28972bb492830f4e6ce007e6e91b0a5d7f8da81d7e4e6d84e0818cd9ef6aea2c58c2da5ba2053a5d31861b8c39d8e331fce650c08d036bc9abb8365d87261a5fa5ede2c15ba50"], 0x0, 0xcb}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x4}, {&(0x7f0000000000)=""/6, 0xffffffffffffff2c}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:46:50 executing program 3: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x2) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)) write$P9_RWSTAT(r0, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200fff) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000100)=0x6) 17:46:50 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @multicast1}}, 0x20) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r3, 0x533, 0x0, 0x0, {{}, {}, {0x9}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800dd005d18056ca659adec7ed071cc57ac8e24f8ae220c5f0b4b85d03435ade819ced9ed6822ed44a41f00874953d24f02ff6e88d49ded2ef318aac5703cc219999a7489531f02c8f7432a0f51742c983050117a1a8ca399bd182188309d407620d0e32837920735ed05bd538d78fc6e2de2f6a5899f24ac3440d47e2e5210b615de3993253556b4df8474ec08d243995d83", @ANYRES16=r3, @ANYBLOB="080026bd7000fcdbdf2501000000000000000c410000000c001473797a3000000000"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 17:46:50 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x4) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r0, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7, 0x7f, 0xfffe}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000180)) close(0xffffffffffffffff) r3 = open(&(0x7f0000000100)='./bus/file0\x00', 0xc4042, 0x0) r4 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x200fff) unlinkat(r4, &(0x7f0000000200)='./bus/file0\x00', 0x200) sendfile(0xffffffffffffffff, r3, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0xffffffc0) 17:46:50 executing program 0: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000340)='./bus\x00', &(0x7f0000000440)) fchownat(0xffffffffffffffff, &(0x7f0000000140)='./bus\x00', 0x0, 0x0, 0x800) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r3) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x40, 0x0) write$FUSE_DIRENT(r4, &(0x7f0000000040)={0x68, 0x0, 0x1, [{0x0, 0x4, 0x0, 0x800}, {0x0, 0x1, 0x7, 0xfffffc00, 'trusted'}, {0x2, 0x2, 0x2, 0x7ff, '&:'}]}, 0x68) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 17:46:50 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x4c, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}]}, 0x40}}, 0x0) [ 1016.376490] selinux_nlmsg_perm: 5 callbacks suppressed [ 1016.376507] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=6237 sclass=netlink_tcpdiag_socket pig=28462 comm=syz-executor.5 [ 1016.456793] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=6237 sclass=netlink_tcpdiag_socket pig=28472 comm=syz-executor.5 [ 1016.465865] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:46:51 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x6) 17:46:51 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x21) lseek(r1, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="10514f41291284113f37d6"], 0xb) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@empty}, 0x20) 17:46:51 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r1, r2, 0x0, 0x200fff) ioctl$TIOCL_UNBLANKSCREEN(r2, 0x541c, &(0x7f0000000180)) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r3, 0x0, 0x0) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1a0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r4, 0xc08c5335, &(0x7f0000000200)={0x9, 0x400, 0x1, 'queue1\x00', 0x1000}) write$P9_RWSTAT(r3, &(0x7f0000000000)={0x3}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0xffffffc0) 17:46:51 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x50, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}]}, 0x40}}, 0x0) 17:46:51 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x6) 17:46:51 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r0, r1, 0x0, 0x200fff) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r1, 0x10f, 0x84, &(0x7f0000000140), &(0x7f0000000180)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r3, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="10514f41291284113f37d6"], 0xb) sendmsg$IPSET_CMD_RENAME(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x5, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @multicast1}}, 0x20) [ 1016.991307] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:46:53 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES32, @ANYPTR64, @ANYRESHEX, @ANYBLOB="66bd153d9fca1f3d4ada8d641bd79bfc8d335a6cb07aba4492632ecf507ea5d58ff571fc0ea2005c2477a68b56286de7f6c39a20c4a03b0c12717f48e1c462ad12892885fb00598926e239e47a64d134e0856ec4babf8a91f13855c38d909045406c0d59e33fd28972bb492830f4e6ce007e6e91b0a5d7f8da81d7e4e6d84e0818cd9ef6aea2c58c2da5ba2053a5d31861b8c39d8e331fce650c08d036bc9abb8365d87261a5fa5ede2c15ba50"], 0x0, 0xcb}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x4}, {&(0x7f0000000000)=""/6, 0xffffffffffffff2c}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:46:53 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x6) 17:46:53 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x200fff) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200fff) ioctl$KVM_GET_PIT2(0xffffffffffffffff, 0x8070ae9f, &(0x7f0000000200)) sendfile(r3, r4, 0x0, 0x200ffd) ioctl$TIOCSSOFTCAR(r4, 0x541a, &(0x7f0000000100)=0x6) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0xffffffc0) 17:46:53 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x60, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}]}, 0x40}}, 0x0) 17:46:53 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x9}, 0x20) 17:46:53 executing program 0: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000340)='./bus\x00', &(0x7f0000000440)) fchownat(0xffffffffffffffff, &(0x7f0000000140)='./bus\x00', 0x0, 0x0, 0x800) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r3) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x40, 0x0) write$FUSE_DIRENT(r4, &(0x7f0000000040)={0x68, 0x0, 0x1, [{0x0, 0x4, 0x0, 0x800}, {0x0, 0x1, 0x7, 0xfffffc00, 'trusted'}, {0x2, 0x2, 0x2, 0x7ff, '&:'}]}, 0x68) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 17:46:54 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r1, r2, 0x0, 0x200fff) getsockopt$llc_int(r2, 0x10c, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@mcast1, 0x0, 0x0, 0x0, 0x8}, 0x20) [ 1019.563093] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:46:54 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x6) [ 1019.675632] kauditd_printk_skb: 7 callbacks suppressed [ 1019.675646] audit: type=1800 audit(1586540814.104:5182): pid=28547 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16276 res=0 [ 1019.785366] audit: type=1800 audit(1586540814.134:5183): pid=28547 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16276 res=0 17:46:54 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x400000, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @multicast1}}, 0x20) ioctl$DRM_IOCTL_CONTROL(r1, 0x40086414, &(0x7f0000000080)={0x2, 0x3}) 17:46:54 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x64, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}]}, 0x40}}, 0x0) 17:46:54 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200fff) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f00000002c0)={0x1}) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r3, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="10514f41291284113f37d6"], 0xb) sendmsg$NFQNL_MSG_VERDICT(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x58, 0x1, 0x3, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFQA_VLAN={0x44, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_PROTO={0x6}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x2}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0xfbff}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x50}, 0x4008094) sendfile(0xffffffffffffffff, r2, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0xffffffc0) [ 1019.993216] audit: type=1800 audit(1586540814.164:5184): pid=28552 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=16081 res=0 [ 1020.053998] audit: type=1800 audit(1586540814.194:5185): pid=28552 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=16081 res=0 17:46:54 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @multicast1}}, 0x20) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x200000, 0x0) r2 = gettid() tkill(r2, 0x1000000000016) ptrace$peekuser(0x3, r2, 0x80000000) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socket$nl_generic(0x10, 0x3, 0x10) [ 1020.093460] audit: type=1800 audit(1586540814.234:5186): pid=28547 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16276 res=0 [ 1020.147436] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 1020.204806] audit: type=1800 audit(1586540814.244:5187): pid=28547 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16276 res=0 [ 1020.241022] Bluetooth: Invalid header checksum [ 1020.246756] Bluetooth: Invalid header checksum [ 1020.249314] Bluetooth: Invalid header checksum [ 1020.277030] audit: type=1800 audit(1586540814.674:5188): pid=28573 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16067 res=0 [ 1020.375956] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 1020.411881] audit: type=1800 audit(1586540814.844:5189): pid=28586 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16067 res=0 17:46:56 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES32, @ANYPTR64, @ANYRESHEX, @ANYBLOB="66bd153d9fca1f3d4ada8d641bd79bfc8d335a6cb07aba4492632ecf507ea5d58ff571fc0ea2005c2477a68b56286de7f6c39a20c4a03b0c12717f48e1c462ad12892885fb00598926e239e47a64d134e0856ec4babf8a91f13855c38d909045406c0d59e33fd28972bb492830f4e6ce007e6e91b0a5d7f8da81d7e4e6d84e0818cd9ef6aea2c58c2da5ba2053a5d31861b8c39d8e331fce650c08d036bc9abb8365d87261a5fa5ede2c15ba5066"], 0x0, 0xcc}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x4}, {&(0x7f0000000000)=""/6, 0xffffffffffffff2c}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:46:56 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x6) 17:46:56 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x68, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}]}, 0x40}}, 0x0) 17:46:56 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="10514f41291284113f37d6"], 0xb) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000240)) r2 = open(&(0x7f0000000180)='./bus/file0\x00', 0xb6901, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x200fff) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000300)=@assoc_value={0x0, 0x2}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, r3}, 0x10) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000200)={r3, 0x7, 0x14, [0x7, 0x0, 0x67, 0x8, 0x9, 0x5424]}, &(0x7f0000000100)=0xe) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0xffffffc0) 17:46:56 executing program 0: syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f0000000000)='./file1\x00', 0x4000000, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="58465342000010000000000000001000000000000000000000000000131de6353c257c70e4bf48b6ad26c597eb4f5c1900000000000000040000000000000d880000000040000d890000000000000d8a000000010000100000000001000000000000035ab424020004000004000000000000000000ec00000c090a020c", 0x7d}, {&(0x7f00000000c0)="2e1d6e", 0x3, 0xcd}], 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00850000000000000000e76dc005000000"]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) close(r3) r4 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r3, r4, 0x0, 0x200fff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000001c0)={@remote, 0x7, 0x1, 0x3, 0xc, 0x9, 0x3}, 0x20) close(r2) r5 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r5, 0x0, 0x200fff) getsockopt$SO_COOKIE(r5, 0x1, 0x39, &(0x7f0000000140), &(0x7f0000000180)=0x8) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="10514f41291284113f37d6"], 0xb) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200)=@ccm_128={{0x304}, "1eb7b8202636eb86", "0eb587932d1e1363cf8da39e72148056", "f739d493", "d00f99ec1dcc5478"}, 0x28) [ 1022.677474] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 1022.694533] XFS (loop0): correcting sb_features alignment problem 17:46:57 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x6) [ 1022.720312] XFS (loop0): Mounting V4 Filesystem [ 1022.749990] Bluetooth: Invalid header checksum [ 1022.754812] Bluetooth: Invalid header checksum [ 1022.760275] XFS (loop0): totally zeroed log [ 1022.781348] XFS (loop0): Metadata corruption detected at xfs_agf_verify+0x4e7/0x9b0, xfs_agf block 0x1 [ 1022.790137] audit: type=1800 audit(1586540817.214:5190): pid=28628 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16162 res=0 [ 1022.823365] XFS (loop0): Unmount and run xfs_repair [ 1022.858893] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 1022.886264] 00000000fe323b47: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1022.892252] audit: type=1800 audit(1586540817.254:5191): pid=28628 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16162 res=0 [ 1022.919933] 000000005ad87088: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1022.944418] 0000000078f017fb: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1022.970578] 0000000091ceb9df: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 17:46:57 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000100)={0xfffffffffffffca2}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) ioctl$KVM_ASSIGN_SET_MSIX_NR(r3, 0x4008ae73, &(0x7f0000000000)={0xb713, 0x7}) close(0xffffffffffffffff) r4 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0xffffffc0) 17:46:57 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x6) [ 1023.013569] 000000005a573387: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1023.049156] 00000000240d016f: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1023.074026] 00000000e3570b43: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1023.140752] 000000003fec5d86: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1023.153484] XFS (loop0): metadata I/O error in "xfs_trans_read_buf_map" at daddr 0x1 len 1 error 117 17:46:57 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000040)=0x2) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r0, r1, 0x0, 0x200fff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000080)={@ipv4={[], [], @loopback}, 0x0, 0x2, 0x0, 0x3, 0x9}, 0x20) 17:46:57 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x6) [ 1023.272405] Bluetooth: Invalid header checksum [ 1023.277932] Bluetooth: Invalid header checksum 17:46:57 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x6a, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}]}, 0x40}}, 0x0) [ 1023.392117] XFS (loop0): correcting sb_features alignment problem [ 1023.415852] XFS (loop0): Mounting V4 Filesystem 17:46:57 executing program 5: readlink(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=""/19, 0x13) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @multicast1}, 0x23d, 0x0, 0xff}, 0x20) [ 1023.449932] XFS (loop0): AIL initialisation failed: error -12 [ 1023.510305] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 1023.521708] XFS (loop0): log mount failed [ 1023.737481] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:47:00 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES32, @ANYPTR64, @ANYRESHEX, @ANYBLOB="66bd153d9fca1f3d4ada8d641bd79bfc8d335a6cb07aba4492632ecf507ea5d58ff571fc0ea2005c2477a68b56286de7f6c39a20c4a03b0c12717f48e1c462ad12892885fb00598926e239e47a64d134e0856ec4babf8a91f13855c38d909045406c0d59e33fd28972bb492830f4e6ce007e6e91b0a5d7f8da81d7e4e6d84e0818cd9ef6aea2c58c2da5ba2053a5d31861b8c39d8e331fce650c08d036bc9abb8365d87261a5fa5ede2c15ba5066"], 0x0, 0xcc}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x4}, {&(0x7f0000000000)=""/6, 0xffffffffffffff2c}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:47:00 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x6) 17:47:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x76, 0x0, 0x200, 0x0, 0x0, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x100004}, @SEG6_ATTR_DSTLEN={0x0, 0x2, 0x5}]}, 0x6}}, 0x4000000) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="c700000034002908000000000000004c03000000c70000003b000100ffff0000000000000000b5060806fff2"], 0xfde8}, 0x1, 0xffffff7f0e000000}, 0x0) 17:47:00 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) ioctl$KDSETKEYCODE(r3, 0x4b4d, &(0x7f0000000100)={0x3, 0xea6}) lseek(0xffffffffffffffff, 0x800002, 0x0) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) r4 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x8}, 0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000001c0), 0x8) sendfile(0xffffffffffffffff, r4, 0x0, 0x200fff) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000180)=[0x8001, 0xc8d]) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0xffffffc0) 17:47:00 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @multicast1}}, 0x20) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="10514f41291284113f37d6"], 0xb) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000000040)="d11756f09e7abec9f65d5db0955469708eee6acf9af66a6b5ab49c393cefbe02846bf637b2b1b0015bf76f188be293c5d7de3d0722cfc4c4df25c92bcf375c322603473d429647910bb1") 17:47:00 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x6c, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}]}, 0x40}}, 0x0) [ 1025.722707] netlink: 107 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1025.776422] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 1025.785418] netlink: 107 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1025.801976] kauditd_printk_skb: 8 callbacks suppressed [ 1025.801990] audit: type=1800 audit(1586540820.234:5200): pid=28706 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16330 res=0 17:47:00 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES32, @ANYPTR64, @ANYRESHEX, @ANYBLOB="66bd153d9fca1f3d4ada8d641bd79bfc8d335a6cb07aba4492632ecf507ea5d58ff571fc0ea2005c2477a68b56286de7f6c39a20c4a03b0c12717f48e1c462ad12892885fb00598926e239e47a64d134e0856ec4babf8a91f13855c38d909045406c0d59e33fd28972bb492830f4e6ce007e6e91b0a5d7f8da81d7e4e6d84e0818cd9ef6aea2c58c2da5ba2053a5d31861b8c39d8e331fce650c08d036bc9abb8365d87261a5fa5ede2c15ba5066"], 0x0, 0xcc}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x4}, {&(0x7f0000000000)=""/6, 0xffffffffffffff2c}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:47:00 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x6) [ 1025.899957] Bluetooth: Invalid header checksum [ 1025.901402] Bluetooth: Invalid header checksum [ 1025.908289] Bluetooth: Invalid header checksum 17:47:00 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x20000003) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000000000000"], 0x8) connect(r2, &(0x7f00007a8000)=@generic={0x0, "95cfb8c57ebd6ba990189977170a070502000002269a0b966b9b9d3289c8784f16963ce7c312649ce2996cd4d2fb7a95ff986185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e626530000000000000000f100"}, 0x80) r3 = dup3(r2, r1, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r4, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r4, &(0x7f0000000400)=ANY=[@ANYBLOB="10514f41291284113f37d6"], 0xb) r5 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000040), 0x0) ioctl$EVIOCGMTSLOTS(r3, 0x8040450a, &(0x7f00000000c0)=""/137) pipe(&(0x7f0000000080)={0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7605, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f0000000080)={0x400, 0x0, 0x2, 0x1}, 0x8) [ 1026.007504] audit: type=1800 audit(1586540820.314:5201): pid=28717 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16330 res=0 17:47:00 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @multicast1}}, 0x20) rt_sigaction(0x26, &(0x7f00000000c0)={&(0x7f0000000040)="66400f38dcfbf2430f5a0bc461d855080f7747cf652e364581d9eb000000c4e1b85c4e3cc422fd30fdc4417df82f0f0f97d6bb0000aa", 0x1, &(0x7f0000000080)="0f37307b82c44279214c3408c482d1dd33c4a29198cbc463e57e2706c4a17f700cbd000000003f66400f3a417d1a25c4c1bddc8301000000c4e241a8df", {[0xfffffffffffffff7]}}, &(0x7f0000000180)={&(0x7f0000000100)="c462bd03ce46fd420fb23aabc421e1ec9afadfef5a0fd9c3c402813eb8ac520000f244d9f60f01db6626660f3a173c5200", 0x0, &(0x7f0000000140)="8f897c80da437c000f0f4900a666440f3a0a63bf7fc443b95f5e0077660fd03d0e00000064400f0f14bc9ac423fd080309c4810211d1467e88"}, 0x8, &(0x7f00000001c0)) 17:47:00 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x200fff) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r3, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="10514f41291284113f37d6"], 0xb) getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f0000000100), &(0x7f0000000180)=0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0xffffffc0) write$cgroup_int(r2, &(0x7f0000000200)=0x8000, 0x12) [ 1026.132346] audit: type=1800 audit(1586540820.464:5202): pid=28717 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16330 res=0 17:47:00 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x70, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}]}, 0x40}}, 0x0) [ 1026.247221] audit: type=1800 audit(1586540820.494:5203): pid=28717 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16330 res=0 17:47:00 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x6) [ 1026.327701] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:47:00 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @multicast1}}, 0x20) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r1, r2, 0x0, 0x200fff) write$FUSE_NOTIFY_INVAL_INODE(r2, &(0x7f0000000100)={0x28, 0x2, 0x0, {0x3, 0x7f, 0x4}}, 0x28) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r3, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="10514f41291284113f37d6"], 0xb) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r4, 0x1}, 0x14}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="3400000010000104000009040000000000000000", @ANYRES32=r7, @ANYBLOB="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"], 0x34}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000400}, 0xc, &(0x7f0000000180)={&(0x7f0000000440)={0x1074, r4, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_MESH_ID={0x1004, 0x18, "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"}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x2}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0xefd}]}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xffffff7c}, @NL80211_ATTR_MESH_SETUP={0x20, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5, 0x1, 0x1}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, 0x1}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, 0x1}]}, 0x1074}, 0x1, 0x0, 0x0, 0x4000010}, 0x800) accept$netrom(r3, &(0x7f0000000040)={{0x3, @rose}, [@remote, @bcast, @netrom, @bcast, @null, @rose, @null, @default]}, &(0x7f00000000c0)=0x48) [ 1026.381937] audit: type=1800 audit(1586540820.804:5204): pid=28743 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16305 res=0 17:47:00 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100), &(0x7f0000000180)=0x4) sendfile(0xffffffffffffffff, r2, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0xffffffc0) [ 1026.491021] audit: type=1800 audit(1586540820.894:5205): pid=28746 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16305 res=0 [ 1026.562526] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1026.586540] audit: type=1800 audit(1586540820.964:5206): pid=28759 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=16301 res=0 17:47:01 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x6) 17:47:01 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x74, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}]}, 0x40}}, 0x0) 17:47:01 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000040)='/dev/vcsu#\x00', 0x81, 0x40801) setsockopt$inet_dccp_int(r1, 0x21, 0x10, &(0x7f0000000080)=0x9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x28}}, 0x0, 0x0, 0x2, 0xb}, 0x20) [ 1026.694977] audit: type=1800 audit(1586540821.064:5207): pid=28756 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=16301 res=0 [ 1026.795682] audit: type=1800 audit(1586540821.174:5208): pid=28771 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16334 res=0 [ 1026.841023] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 1026.976373] audit: type=1800 audit(1586540821.274:5209): pid=28771 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16334 res=0 [ 1027.114747] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:47:03 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES32, @ANYPTR64, @ANYBLOB="66bd153d9fca1f3d4ada8d641bd79bfc8d335a6cb07aba4492632ecf507ea5d58ff571fc0ea2005c2477a68b56286de7f6c39a20c4a03b0c12717f48e1c462ad12892885fb00598926e239e47a64d134e0856ec4babf8a91f13855c38d909045406c0d59e33fd28972bb492830f4e6ce007e6e91b0a5d7f8da81d7e4e6d84e0818cd9ef6aea2c58c2da5ba2053a5d31861b8c39d8e331fce650c08d036bc9abb8365d87261a5fa5ede2c15ba5066d6"], 0x0, 0xbb}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x4}, {&(0x7f0000000000)=""/6, 0xffffffffffffff2c}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:47:03 executing program 5: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x511000, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001400b59500000000000000000a400000", @ANYRES32=r3, @ANYBLOB="1400020000000000000000000000ffffac14140014000600000000000600000000000000000000000776510253672f1038c5aa2df25831f91799a125e3c03895978df0ef8f42aa60b66bddae9e722c408906b2c939270bb4ed3bef40027f85039bb73fe93e3f64d01521e4330ac39139d3f8bfd0e69061742806c0e6a87ae8d447498173403bb16bbafcb7bf59f9edc0fc1c0a9ffe06cc18cca74791814255dad71b4777a2dc0bb405b088bfc0ef01798a08334139eff3dcad8f5b87f8fd4e95137add39188ff7e972ce2df6e41532fae7f83d1630e178e0723743216dfc48d3b8"], 0x40}}, 0x0) r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) r5 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r4, r5, 0x0, 0x200fff) setsockopt$sock_timeval(r5, 0x1, 0x14, &(0x7f00000000c0)={0x0, 0x7530}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r3, 0x1, 0x6, @random="e13dd43b3ffe"}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @multicast1}}, 0x20) 17:47:03 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x6) 17:47:03 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) ioctl$KDSETKEYCODE(r3, 0x4b4d, &(0x7f0000000100)={0x3, 0xea6}) lseek(0xffffffffffffffff, 0x800002, 0x0) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) r4 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x8}, 0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000001c0), 0x8) sendfile(0xffffffffffffffff, r4, 0x0, 0x200fff) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000180)=[0x8001, 0xc8d]) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0xffffffc0) 17:47:03 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x7a, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}]}, 0x40}}, 0x0) 17:47:03 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) dup2(r2, 0xffffffffffffffff) preadv(r2, &(0x7f0000000100)=[{&(0x7f0000000200)=""/216, 0xd8}], 0x1, 0x2df) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7, 0x7f, 0x2}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x200fff) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000440)='NET_DM\x00') sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r4, 0x200, 0x70bd28, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40000) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r4, 0x8, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48001}, 0x80) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0xffffffc0) [ 1029.142368] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:47:03 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x6) 17:47:03 executing program 0: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x74, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}]}, 0x40}}, 0x0) 17:47:03 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @rand_addr=0x7}, 0x1, 0x1, 0xff, 0x0, 0x2}, 0x20) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="73797374656d1947504c656d3000"], &(0x7f00000000c0)=""/246, 0xf6) 17:47:03 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x90, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}]}, 0x40}}, 0x0) [ 1029.443417] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 17:47:03 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="10514f41291284113f37d6"], 0xb) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, &(0x7f0000000100)={0x8001}) ioctl$SNDCTL_DSP_GETCAPS(0xffffffffffffffff, 0x8004500f, &(0x7f0000000180)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x2) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r2, 0x0, 0x0) write$P9_RWSTAT(r2, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x7) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x200fff) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000080)=0xffffffc0) 17:47:04 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x6) [ 1029.658061] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:47:06 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES32, @ANYPTR64, @ANYBLOB="66bd153d9fca1f3d4ada8d641bd79bfc8d335a6cb07aba4492632ecf507ea5d58ff571fc0ea2005c2477a68b56286de7f6c39a20c4a03b0c12717f48e1c462ad12892885fb00598926e239e47a64d134e0856ec4babf8a91f13855c38d909045406c0d59e33fd28972bb492830f4e6ce007e6e91b0a5d7f8da81d7e4e6d84e0818cd9ef6aea2c58c2da5ba2053a5d31861b8c39d8e331fce650c08d036bc9abb8365d87261a5fa5ede2c15ba5066d6"], 0x0, 0xbb}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x4}, {&(0x7f0000000000)=""/6, 0xffffffffffffff2c}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:47:06 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @multicast1}}, 0x20) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x200fff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r8 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40000, 0x0) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x2, 0x3, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x38}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x800, 0x1}}, @NFQA_CFG_CMD={0x8, 0x1, {0x3, 0x0, 0x18}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x40000) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="10514f41291284113f37d6"], 0xb) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000300)={{0x2, 0x4e21, @rand_addr=0x5712}, {0x6, @multicast}, 0x22, {0x2, 0x4e21, @rand_addr=0x7}, 'vcan0\x00'}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010300000000cfb80674fe0a338862b86dac", @ANYRES32=r7, @ANYBLOB], 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r4, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="6ad6fc14eb07"}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffff}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0xc0) 17:47:06 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0xa0, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}]}, 0x40}}, 0x0) 17:47:06 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x6) 17:47:06 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x14, 0x0, @thr={&(0x7f0000000400)="fc3a8f9ff2150286d04e305c32d93314", &(0x7f0000000640)="9aa37fec49d6b2d4a20be3e3baa4e553f334517bc26cc76fa47c32b08cbac621dfae024776a03ac61a310fd2c60d1ba2321f50efd89d0fb429f21e779ec90938d42f05b451357ce11d6fca733d489e4b2c918e9e5c65a79ac57247fbfc861c098689ed9e3651ff93c917bff424327626068d394c69d2f632310c1b6320a53a7765538823423e5c57716ea5fcc2ab43bffc568dd6efae1caadc5e8f60f01e4f3c0a16d228c7b5d7cbf32bdd50c0e76d6e697db94abfd09301116286b53b84b3f1741ccf49c01e247c166e02d01a7106c74fd78d589ed0c8e14c0d258f82d6101cc06e39a03465222a8b19068ebd"}}, &(0x7f0000000200)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="500000000206010000000000000000000000000015000300686173683a69702c706f72742c6e65740000000005000400000000000900020073797a3100000000050005000200000005000100060000006c62c189669662ddc70a4171eb119d69609c8c2b230fd0fb9febb044d61ca5960216d0330ddbee6da560b0"], 0x50}}, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000000), &(0x7f0000000040)) socket(0x0, 0x800, 0x0) poll(0x0, 0x0, 0x204) r2 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf\x00\x00', 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000030105020000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x20004000) fcntl$setlease(r2, 0x400, 0x1) fcntl$setown(r2, 0x8, 0x0) execveat(r2, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) 17:47:06 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x23) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0xffffffc0) [ 1032.211119] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 1032.239302] Bluetooth: hci0: Frame reassembly failed (-84) [ 1032.279398] kauditd_printk_skb: 8 callbacks suppressed [ 1032.279412] audit: type=1800 audit(1586540826.714:5218): pid=28897 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16382 res=0 [ 1032.298803] Bluetooth: Invalid header checksum [ 1032.314173] Bluetooth: Invalid header checksum [ 1032.325251] Bluetooth: hci0: Frame reassembly failed (-84) [ 1032.361838] Bluetooth: Invalid header checksum [ 1032.407926] audit: type=1800 audit(1586540826.774:5219): pid=28900 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=16392 res=0 17:47:06 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x34}}}, 0x20) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x80, 0x24800) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, r1, 0x69ce, 0x2, 0xffffffffac39f8fa, 0x4}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) dup2(r2, 0xffffffffffffffff) dup2(r1, r2) [ 1032.499639] audit: type=1800 audit(1586540826.904:5220): pid=28900 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=16392 res=0 17:47:07 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) arch_prctl$ARCH_SET_CPUID(0x1012, 0x7) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0xffffffc0) 17:47:07 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0xe8, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}]}, 0x40}}, 0x0) [ 1032.625811] audit: type=1800 audit(1586540826.974:5221): pid=28897 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16382 res=0 17:47:07 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x101, 0x0, 0x0, 0x4}, 0x20) [ 1032.690448] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 1032.775542] audit: type=1800 audit(1586540827.204:5222): pid=28923 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16397 res=0 [ 1032.795971] Bluetooth: Invalid header checksum [ 1032.799554] Bluetooth: Invalid header checksum [ 1032.801379] Bluetooth: Invalid header checksum 17:47:07 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @multicast1}}, 0x20) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="1b514f41291284113f37d6"], 0xb) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000040)={0x3, 0xa4, 0x1}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000004380)='/dev/cachefiles\x00', 0x0, 0x0) sendmsg$AUDIT_DEL_RULE(r2, &(0x7f0000004880)={&(0x7f00000043c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004840)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x430}, 0x1, 0x0, 0x0, 0x4010}, 0x50) 17:47:07 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000300)='./bus/file0\x00', 0x28) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x200fff) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="10514f41291284113f37d6"], 0xb) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000200)={0x5, 0x5, 0x4, 0x4000, 0x0, {r3, r4/1000+30000}, {0x4, 0xc, 0x2b, 0x7, 0x5, 0x1f, "b7c10e0c"}, 0x3, 0x2, @offset=0x4, 0xff, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r5, 0x40086424, &(0x7f0000000280)={r6, 0x2}) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0xffffffc0) [ 1032.946847] audit: type=1800 audit(1586540827.374:5223): pid=28915 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16397 res=0 [ 1033.123933] audit: type=1800 audit(1586540827.554:5224): pid=28943 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16349 res=0 [ 1033.259507] audit: type=1800 audit(1586540827.694:5225): pid=28947 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16349 res=0 [ 1034.268471] Bluetooth: hci0: command 0x1003 tx timeout [ 1034.286638] Bluetooth: hci0: sending frame failed (-49) 17:47:09 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x14, 0x0, @thr={&(0x7f0000000400)="fc3a8f9ff2150286d04e305c32d93314", &(0x7f0000000640)="9aa37fec49d6b2d4a20be3e3baa4e553f334517bc26cc76fa47c32b08cbac621dfae024776a03ac61a310fd2c60d1ba2321f50efd89d0fb429f21e779ec90938d42f05b451357ce11d6fca733d489e4b2c918e9e5c65a79ac57247fbfc861c098689ed9e3651ff93c917bff424327626068d394c69d2f632310c1b6320a53a7765538823423e5c57716ea5fcc2ab43bffc568dd6efae1caadc5e8f60f01e4f3c0a16d228c7b5d7cbf32bdd50c0e76d6e697db94abfd09301116286b53b84b3f1741ccf49c01e247c166e02d01a7106c74fd78d589ed0c8e14c0d258f82d6101cc06e39a03465222a8b19068ebd"}}, &(0x7f0000000200)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="500000000206010000000000000000000000000015000300686173683a69702c706f72742c6e65740000000005000400000000000900020073797a3100000000050005000200000005000100060000006c62c189669662ddc70a4171eb119d69609c8c2b230fd0fb9febb044d61ca5960216d0330ddbee6da560b0"], 0x50}}, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000000), &(0x7f0000000040)) socket(0x0, 0x800, 0x0) poll(0x0, 0x0, 0x204) r2 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf\x00\x00', 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000030105020000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x20004000) fcntl$setlease(r2, 0x400, 0x1) fcntl$setown(r2, 0x8, 0x0) execveat(r2, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) 17:47:09 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES32, @ANYPTR64, @ANYBLOB="66bd153d9fca1f3d4ada8d641bd79bfc8d335a6cb07aba4492632ecf507ea5d58ff571fc0ea2005c2477a68b56286de7f6c39a20c4a03b0c12717f48e1c462ad12892885fb00598926e239e47a64d134e0856ec4babf8a91f13855c38d909045406c0d59e33fd28972bb492830f4e6ce007e6e91b0a5d7f8da81d7e4e6d84e0818cd9ef6aea2c58c2da5ba2053a5d31861b8c39d8e331fce650c08d036bc9abb8365d87261a5fa5ede2c15ba5066d6"], 0x0, 0xbb}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x4}, {&(0x7f0000000000)=""/6, 0xffffffffffffff2c}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:47:09 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) r3 = accept$netrom(0xffffffffffffffff, &(0x7f0000000200)={{0x3, @rose}, [@rose, @default, @null, @netrom, @null, @rose, @rose, @netrom]}, &(0x7f0000000100)=0x48) writev(r3, &(0x7f00000015c0)=[{&(0x7f0000000180)="159fe228585ddbbe4089971d430e804e78a8450a41ae7e8199e32f8b0c92491a1f3226f431b3c0294bfdb74dac4c0c5cb5d829bab234e6527ca47372b036", 0x3e}, {&(0x7f0000000280)="09229bbce0c8181f675fc20e0a8e53af78b71f9d3040c072f309c92a0821eb6a6202b062837f0bae9661038f118271dfad337f4e107165fe9685ab25085129b1a8256fa473c977195d432e6bb94b07d7a6446ad5e9ee8e4aabac2a11eefad61fd62d59ad92b142b8b54ecc5f5748607c6dc22432485c71ebb6d04f2b50cf706de9ee2577e458693dc44f083ded0ee8951cf5d39cce2d599c76", 0x99}, {&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000001340)="649c33953643914c60069f78a607be3a7cee2bcd867f894ed5c5fd9dac7c34f812f6977d7b27ce867237ee9e6bedc0350e54f3d2a56ba91c36ea26a670d475cc61d82f45213346b595224a7cc9243a7e2f550a8fa5fa103d6a0bb685a75791703352dc6838bf0a5015170af701192240faa030", 0x73}, {&(0x7f0000002040)="9e7e5b189da62f4bf8ef990f636281dd100ef065a5d2c2db8de5a70e64a0971cbf759b8c7f643341411f48ef8a04582eb43bb031aa8d3014db38a2f543cf9d90bc9b885caa0b57fc7520ad7ff9b7256265b61b59c66c58725cb1b763f4ff4986cd15cecafbd7e9f508b9bee805416923b64e089f461d727df37b87379d3e3deac5603c01916035bfae5df8292f2d66df799ed5fb5c12f0d4c023f63ff8eef19154cad6fb8ffb3de774b52922d824c123aeef02f2e12f3b897eddc625a8c88cacc565cbfd4f184cf9e0393c98abc63521d85393ee46556a7500f163a7270d60f0073f8a3ce7753c83808f1013117f7ffbee774dfdf52373dc06831dfceeb0c13fab4c38a71cdf8e408a751036c7a8da9e4f263613bab165850badfec68b2d9b4b0e9a7d0fbc38177d1938ce4a8dc6f6ae205e4b68161c91f3b8a10ee565c03bb141522e29bc2c46b11e7f2b9379c3099421708e0c76bda88b1029d6b9a302b7e3067e42f4455793612b4a3f5ada4d880ebb1fc89fa1be4709c48456faaa976f90a8319604506c228c3f0780c4eb0deee130aa7940b2969f634d5eb4282dc806aec23d223d8c0de70eaf4b9ee85ccc2ad87a5b02414ac51950f95397f2afc6d93ae09635ae99f22485e4105f0f187329dc916d516e26876a6cdb17f8b7dc384152bbb437b97a890ba3e8648d973c5e50f13c67452ab48e7cfabefd7e3ce098fe094ac43c4a9aa29fa7d41879b47a6ad78fc51d84274688cc4e7598ca04086c1484bb85105db92a86db516d862d0bac61e200a4bdc78b855d52fc498ed9d932c007ec8a6901edbe742264ecf3ea4e9e804602566a3921be4668f219205c337b74a8127c882cb2a509a17baa383a1b24dfc7f2f6e4e8c607322146d258a3fb7269478356ac4703d40089290c73e1ff03c623cb596241918181fdc4e2fdc494899daa7db906234c09921484faddaedf532b6c65dd96e8aae57f44c067ae92e7a653f8ee4925fe1933bb220ab83b9d3418e99088e8367bcb0b6f18016b48fd4e565dee3dce6ee3cf5c4619cad34128e54317bbf191af93cc6b5dcbc7dfa486862ef0a5bc1362d525f275f0b0e7205660a2bbacf84cb61e79d62b1e859b3e217d06169df4901bd33f9281ad88b13075ca3d8eecd74e7457b3249f87ccb514ae3b6b9c68218be0a53cc809dee10c5ca058592eaf7e39875f24619a7aa581e8e29b0fde2b933afe8719affed0de034fe7050d1ac3cf498f43de182b144f7970c467b76fee626f05a021de854c5a141ce66af1218aa5cebfc26494c8b92a37f2d9a13ab40876fa831f6dd833a07df07576879e1dbf1b0cc57de0f595a33d5ab380b0973631eaa7d1dc3f3d46aa8effc189e06fb40f18b6e8c6bc613d7fa661b2e634a3a992c21fed87e8ee98ae208130330a3c388d99b60f217a6ebf93787efc6ff0ebf1d9f813cf3ca0b3790d1665c70053b0066b00be55ac9b3f426f4348dacf1c39dd9b422efa50109e5c0f2ee5ab5694a6e2a80a46ff415baafe5dc481690dae0c8f49a00e08efe1bec788ec5a4d510c8c5dd9cf67b59434b9c3c7db5f483d3856627873bb832201c4086f931f35634c729ea4481761440fe5fd7469a80758541992d549dfa6496d65f37d81d5a67b70c9997092203691267e318195e9eef6182bf90d150fd0ac81d9b72ca51e2240772181b75fe133a4deb44025b99e4da9f2fc46303ba3397823e997104d7694cfa5905f2828ce8f98e4725f8d7de6a3bdfc4ab73865c4feec9bbdea668c1942b1e9fbc774ec24607e086aec5d901d46c5bca8e7b5479fda5b2a0d83438d552ddcc21b5756b78efb79221ff73974c4f8aea6a6a9f5b425bc6fe056614d277fe50ee806ca668478a9c65c80b75d7b76e2f9adf29520767929ce9da1c4c93006a94f50c6c880da50a1d45a3e898f6890e0d37ffd3119ed323cdb86a9a973affbb6a9e0f3035bc42adafdf92ce28e0bd141b2696310933563eba1d6919385269a1dd296e2066924be37596d0decc0339683e1e70d31bbfc72c5735a305c138ef289464f46da77469d6ef40d1c545dae8e00bd50554d14f15d694c53dd851e28098652b70cbf157acbe618904ffee689be3afc86157fc1972d6fb07769beb9a19acd0eaf1dd55d07248763816376159d7ef2e4ec9e033d6e6f44ce573c0a6a4e0694cd63da6702c20c1dbb51c0b1c19e41d6de73f94d42fd896b3ab668ca8639364dd81e5bb5c2ab9dec79d01ed607afda651ab291998c85710092b4f42ed7dfacaaed36e5802ed7859aa43d5d353c482d759a3b42a0c093a98c4288d44c9ff42f903484866931d842dfd81bc919edbc89cad3e3bd8f458abf7bea9b553c1074b628d6594c0b1ad934a5464cd5ee58078fa7ccde262ca6772cad19183596d81a80e7906e44e70122b207f92c1df73773d72fc19db2bf4e32cac070b8168ce77de4f14d30effa962b53a178325151eec72f62da6b49e109f52014547d84cc80bb3039abc5208511e2cebf952fa8eb54a29090e539a82aea6dd7d1083c38901b33bfbf6a066d55621fa21323829762c4089baf86c9aa0ba3a6fb8440a5e8d0fe3733107c6fd22175108d224fad16f5476ddcf34a23d6941b86aa898837bb846221f18c4f15790686b1e5f009fca151bef5257167951d9bc7ceb1e1c5b1c0a1c392750938b59298574f8f23ae62800ec164edde37da2d7b1d5795b2c02e7c17416ca197b3daad2314be3386d76a52b2b88756b0d6c8ee6c8194030343e7109e1f5eb0dff892a7a706f719010857a1c4fe69fa53678d9f5ed4345f8d8ea3d691a63329800fb5a00e83780dc7b99d9aa497b9be975ab040822ffa16f5780ac5d67789e502f8bc71b205c72d7a82626a4400163f1221b8f7db8184a74219c58bbc79462bd6e02c141f7187dcccde2490963ea9347d0fc0538147bf88ee670008b68ace8eee679289bf856e8d13158fa3cf5abd722f9691ee94b9a3803e9ab86bcf97e23aeba267f8339c400d0d0aecadd022e114d678ed19b675f5f6b44745060ba0c589f3d542fc205dd3eb6c32856281400469537c3103d596e1bbc9da172c0647f7b2c6fc9390f027ba430f82de0484c61cd2bb4a45743aa885bec63acb992a91643244e6bb481d43072ea740a01d4de74dd44a1a3a32683bb0845c89dda441b92efa2fd7edf7d037171437a858bdc44d30fefd63cd45e69843f4f7620ed9aa184de295f0a6bc5b5b649f5d414ef91ede0731b1e01fe8182a32754693b7f9435f80fecf80669ff8fe348ca06f36bdc32f5076ed7493eb62523b474c84f4b07813229b82adfebae9ac9a610121b851f77dba306859b07493b4a683e2919a5c238b8af61df5b71700768863166d43a3bf7227731f244a92e2a074111649437cc904e1a17fdce6427cd617091936dfa7cb133b7510bd7f4da0c658582c111b5661b97314e5c24f5279e523040a76f00d747324ebfce9d328ac76d144cc463d6367a6b8a821d1c34bfaeb8e76c7c2dc1d5820b7d599d9045710ebf5e8f4590142e0e05c560c00add38ab8cad433be0aeb65a5a60c320905691427cccad466256ffe31eec8b1d811f059a4ccc9cb62b5c191326ffeb85edf133eef5f67e24452ec197c8ee6294388c6ef1044337e9e347bf7ac5ad4655d1fc4742d5dc11b4446c764f759d185a314a26edb5f0201e91e994832d2baf533ed81e9e3c390d90be78fc98062bc2925cb637a5be2210544fbdf5c3aca9d18d5ec9399851eca7cdcf9ff1c069dfe544b386a036a7c40f03adad9bb72385fb13f2f67893c5e0670193e953299a229dca3463ed30e546c6dbcb5eab01e2ba3ab77b1e40c1c66619ec2e2bfa556ad0f8d63e106c5ed84de4eb8f30e8549ba8e210feb7ac0f0e142bd0dc9e7bd1daaaaaadbd625b4e3d7621b7abb8282e449b0d33d0482696c7393ae4aea10335c576c09c59af590cf6bdb4cb36baa361a04aa12f74c4b99df63930497fce053f564b3e574a6fc57451e07a88361a0d46650d9016476f001a094a0bd5b42753426a689ac5254f0fc8c41956a73010a1595f5573552e9fa3bb2cf57650fc3c9b1961468aa9cef49dd4d8320d12705056dd1b1139d480ee48eacd028b4bc3d3f3edd38991d7e75e591cd12bf39b399bc2e6d7c8b72e8379bbc3fb2c9c4e5eb52edde0dba0cb0fa1914249d5f28296b3513edca0a838d17daf3799136fd0818d8753b154899638eb15b94807ccfe166a232cdc9cd34d8f5c4a739ff9a279134bc1267ea396a07526750d8f9fa799db494faf992ba672a2976eb0d3c037436d01d3bf6f82f7322907d688d707d0a9e585e8458485455dcee476c611337228a16d250eec3267cd542473728552b55e0b554000acbfd8ce9cbb7e74c2e1360aac5428030bc5cdaae3701a8cb74c75ec747a81bdb32d893b2bc6917c85616fb90e3ff3c045da72f4643429f087b9bba1bd054fc2194cdc68ab02e393cb5656524141e82fcb8db57260efef5d3e04fc6e93835eb98b19df63d43ea12ef8f2d037f7bfeb4883e022f878aa6771c42b3b2e37e3384c09803edfa31e4fdd8b4776b0fb834b675aaf3304ff09235d69a977af8e7751240d82d1e85f62737795ffc58c8e182a9cfcb1d196d42f92e2479efd4016bef2f4ac69c799a6fdca4aede6a14b832e72e9c236f5dae69fc854079aabf2921813b6799a4a624079c9aceef0f3fed5efeb53268d5b737e3b334f04062ef15989c1c0b7de435684f0337196b13391fc77372aab476d9630f809abeae498d1c2c4726c9e1909ade30a16d1b5f231249d87a0473473b9e2da74c3882a4a3c9663a1a1a40af6f9e7c92dd22039b7f32b6fb234a60d479426d86077357435ee8c7c4e985d2d5b940ce16109f89739dab095f6d5b92215ef04b2d3f765484f9a1048a9093a9df73551882c6584774a7c375ad30c9992843a0dd430e3280f9869f701525066889473c3f347f3e06fe4f54b83725524bd9f6ab946b88f4493899b0f28510f0255b3e055008ff38e1ed3ed4c05459ce3d05d24c73b38300410d06937fee45d4f8a7a6fc75885c75177676b2d80297bd51af320735d662311a4abef1a59090cb7e009caeadfb8aec338a67f424d2ab030745e7eb87d0a0db3113e4b1edb3c26c05651ca002d9fb8dd7c222805e39683d1ff854b22a5c982fde986ac26ba85dd34dc79d188d7414ae4cbac62de0398b09dd662b45e0c3ca05772ff15fe70bfb2e165e61630e246e54a26ba308ae094419412fb06777cfbedb1451d265f2b17a488e6bb510acb44507cd6a7f8a8503c694f1500eba995a21ced3e22ec293caa9515d67efcd500b7c4ae7e65eaab48f9721be43e16e4b3e29521f55c5388cee23be04e8d034ee7e7e7783763b182bf039982e288bc590f6801c7a959f2152f3d9196641f3cc7d57b05cb5b978154bb4a4bb7eecd8f6ed08bd3210aef16e994d15d7967eceb8fd5c0ddb9017a286d2283960979c1909f1a62aae66225f69601402f5caa3be815a63744eb99c289ce3d5e15e8f74c3ca09fe5e3b0681814ca2e075cfd7c39f79b9c6f6671eedd85720695d903b227fd4fb40a904eeafaadcc67c559686c29b9495e4fae3708b6810275a7da6e28c37c5728fbf2d03ecf9bf35f6300dfad1c98f98193dda3a37641c3e6db6ee90c909e2b7f8edc7ac7034e6c49f1e064461ef8a4c767d256a5214e5beb7140926d7aa5c54587fd48e46cf266f9d1469f77783af845bddb2c6bd00ce97fa49b5df62d81c612ef5d2fc7d173fa3bc84e277a17da348564ec790", 0x1000}, {&(0x7f00000013c0)="ce83bd7342a9e1d0108c8931553b58e92a71ba0c45", 0x15}, {&(0x7f0000001400)="2a6d47c3316002a9a6bfa060b18c2a62238551561329c7", 0x17}, {&(0x7f0000001440)="185fbcd6a26a12f0df0c9ca4f71fbeb9e240fb9cef3235de64b65cc02fa78b29a9da0636713852667476b17c345a4e3a9dc67f0acad44f1bf811b1ddde7ee8b135dc90d7d12cd0852ddc8f55a3ceaf72805cdb6dae236435bf2cf7553c56c4e9c7820bff2d3a9f6d1c96ef256c57f99d344f064f84f4eb30481b72a5f9cfc49c4103b52de19757cca63982729e141f50a8fc6d70a6d04d167bf4545bb2fcf0bae62b68883bb980c2ac213f314f7d30b3b75699a7defb7f4337f1049923f3801243d720947284d0a636c23c7b079d4369517533865c16fe692522a9bfe5ecdf77d41b", 0xe2}, {&(0x7f0000001540)="32dc8cd77117b4e60d78c29278502634745553bf6619f7998f97ca7da54882c019e0a1fdd5cd4e42f385457a4787479c3361930d5aa13cc64a1397d34982ee696d8ae63b196fd5d67b5b2fe527c6de2c5e4010998524a2ebcda7641134454dc2c8315df788285464b0a62112cd79aae1c2d3fb3494ffee", 0x77}], 0x9) sendfile(0xffffffffffffffff, r2, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0xffffffc0) [ 1035.328705] audit: type=1800 audit(1586540829.754:5226): pid=28957 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16379 res=0 [ 1035.582156] audit: type=1800 audit(1586540830.014:5227): pid=28965 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16379 res=0 [ 1036.348451] Bluetooth: hci0: command 0x1001 tx timeout [ 1036.367166] Bluetooth: hci0: sending frame failed (-49) [ 1038.428513] Bluetooth: hci0: command 0x1009 tx timeout 17:47:17 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x6) 17:47:17 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}]}, 0x40}}, 0x0) 17:47:17 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="400000001400b59500000000000000000a400000", @ANYRES32=r0, @ANYBLOB="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"], 0x40}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) dup2(r1, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000006380)={'team0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001400b59500000000000000000a400000", @ANYRES32=r5, @ANYBLOB="1400020000000000000000000000ffff0000000096bee940f50492b08f7df62827c0f92ca993654341b491bcd508e437df1239da3bf8e2cc43119e1016c2c5cc4f5357dbbb6d4aeb5d85e3aaafae0110ffb16baf075c9878fce6f36ceeeb5a77be233867e63353ea4ff598c97cd3a68259a54867b212f0e3a08d02703d2d7c1e35e9"], 0x2c}}, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001400b59500000000000000000a400000", @ANYRES32=r8, @ANYBLOB="1400020000000000000000000000ffffac14140014000600000000000600000000000000000000000776510253672f1038c5aa2df25831f91799a125e3c03895978df0ef8f42aa60b66bddae9e722c408906b2c939270bb4ed3bef40027f85039bb73fe93e3f64d01521e4330ac39139d3f8bfd0e69061742806c0e6a87ae8d447498173403bb16bbafcb7bf59f9edc0fc1c0a9ffe06cc18cca74791814255dad71b4777a2dc0bb405b088bfc0ef01798a08334139eff3dcad8f5b87f8fd4e95137add39188ff7e972ce2df6e41532fae7f83d1630e178e0723743216dfc48d3b8"], 0x40}}, 0x0) r9 = socket(0x10, 0x803, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001400b59500000000000000000a400000", @ANYRES32=r11, @ANYBLOB="1400020000000000000000000000ffff0000000096bee940f50492b08f7df62827c0f92ca993654341b491bcd508e437df1239da3bf8e2cc43119e1016c2c5cc4f5357dbbb6d4aeb5d85e3aaafae0110ffb16baf075c9878fce6f36ceeeb5a77be233867e63353ea4ff598c97cd3a68259a54867b212f0e3a08d02703d2d7c1e35e9"], 0x2c}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000006a40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000006a00)={&(0x7f00000063c0)={0x63c, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [{{0x8}, {0x170, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x27}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x6ad}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}, {{0x8}, {0x164, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x27d}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0x1b4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x8000}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x19b}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x4800000}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r8}, {0xe8, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x64, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x34, 0x4, [{0x3, 0x80, 0x1, 0x1788}, {0x1, 0x81, 0x81, 0xfffffff9}, {0x100, 0x9, 0x40, 0x2}, {0x9, 0x5, 0x7f, 0x4}, {0x9, 0x6, 0xd3, 0xfffffffe}, {0x3ff, 0xa1, 0x4, 0x3ff}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r11}}, {0x8}}}]}}]}, 0x63c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000044) 17:47:17 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mknod$loop(&(0x7f0000000180)='./bus/file1\x00', 0x0, 0x1) setxattr$security_capability(&(0x7f00000000c0)='./bus/file1\x00', &(0x7f0000000200)='security.capability\x00', &(0x7f0000000340)=@v3={0x3000000, [{}, {0x4}]}, 0x18, 0x3) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file1\x00', 0x4602, 0x10) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6c6f5765726469723d2e2f4275732c776f00006469723d2e2f66696c65312c65309b889f964c9c4243bc4178ba5f17cfc442453e92089c3fcfe22cc361425a77a8c7811a205f18b7a4c18658efa223fa502cc17ebfc1d545cfd9"]) chown(&(0x7f0000000600)='./bus/file1\x00', 0x0, 0x0) 17:47:17 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000200)={0x0, 0xfb, 0xad, 0x4, 0x40, "fea9231871720f386e6d0b12a6c83eba", "67084bfd1a39222c7c263402ddd801d094e82c4f659175e62ebe09043cb448f9ec80bc6cd9576d60c9b7a04dad4840efaf0d38f1847360c1b12863377615bc1d722968b561613600d3a12a772a7dbd6ee2337062cc3c617095d72210a88c7b8f9075bea4a4a4f481faf2858dcb8a5b6165b8e6da55aa8c2b8aefd4d6b8d0330686231ac53089e17f5c08219e2247d573f953e58ee5af0a28"}, 0xad, 0x2) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x28, r4, 0x1707, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'ib', 0x3a, 'vxcan1\x00'}}]}]}, 0x28}}, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xd0, r4, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x24, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0x54, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'netpci0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @local}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x26a, @empty, 0x2}}}}]}, @TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbc2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}]}, @TIPC_NLA_SOCK={0x4}]}, 0xd0}, 0x1, 0x0, 0x0, 0x80}, 0x400c0c9) sendfile(0xffffffffffffffff, r2, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0xffffffc0) 17:47:17 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES32, @ANYRESHEX, @ANYBLOB="66bd153d9fca1f3d4ada8d641bd79bfc8d335a6cb07aba4492632ecf507ea5d58ff571fc0ea2005c2477a68b56286de7f6c39a20c4a03b0c12717f48e1c462ad12892885fb00598926e239e47a64d134e0856ec4babf8a91f13855c38d909045406c0d59e33fd28972bb492830f4e6ce007e6e91b0a5d7f8da81d7e4e6d84e0818cd9ef6aea2c58c2da5ba2053a5d31861b8c39d8e331fce650c08d036bc9abb8365d87261a5fa5ede2c15ba5066d6"], 0x0, 0xc5}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x4}, {&(0x7f0000000000)=""/6, 0xffffffffffffff2c}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1042.822446] Bluetooth: hci0: Frame reassembly failed (-84) [ 1042.833310] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 1042.924350] overlayfs: unrecognized mount option "loWerdir=./Bus" or missing value [ 1042.934133] Bluetooth: Invalid header checksum [ 1042.942873] Bluetooth: Invalid header checksum [ 1042.952409] audit: type=1800 audit(1586540837.384:5228): pid=29000 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16411 res=0 [ 1042.973398] Bluetooth: hci0: Frame reassembly failed (-84) [ 1043.039263] Bluetooth: Invalid header checksum 17:47:17 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="10514f41291284113f37d6"], 0xb) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000080)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x0, 0xd0, 0xd0, 0xffffffff, 0xffffffff, 0x330, 0x330, 0x330, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@ip={@dev={0xac, 0x14, 0x14, 0x21}, @local, 0x0, 0x0, 'dummy0\x00', 'veth1_to_team\x00', {}, {0xff}, 0x89, 0x0, 0x10}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x2, 0x3, 0x1, 0x0, 0x1, 0x4], 0x1, 0x5}, {0x0, [0x4, 0x1, 0x7, 0x0, 0x2, 0x7], 0x0, 0x2}}}}, {{@uncond, 0x0, 0xa8, 0x108, 0x0, {}, [@common=@unspec=@time={{0x38, 'time\x00'}, {0x4, 0xfffffff8, 0x9032, 0xbc78, 0xfffffff9, 0x3, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x2, 0x1, 0x2, 0x1, 0x2], 0x6, 0x2}, {0x1, [0x6, 0x1, 0x0, 0x6], 0x6, 0x5}}}}, {{@uncond, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}, {[0x4, 0x1000], 0x1}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'veth0_to_batadv\x00', {0x4, 0x5, 0x7ff, 0xa7c, 0xfffffff7, 0x100000, 0x1000, 0x78, 0x58}, {0xffff}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x4, 0x5, 0x4, 0x4, 0x1, 0x3], 0x1, 0x2}, {0xffffffffffffffff, [0x8, 0x0, 0x1, 0x4, 0x1, 0x1], 0x6, 0x4}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @multicast1}}, 0x20) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) ioctl$EVIOCGUNIQ(r3, 0x80404508, &(0x7f00000004c0)=""/18) [ 1043.106857] overlayfs: unrecognized mount option "loWerdir=./Bus" or missing value [ 1043.163143] audit: type=1800 audit(1586540837.594:5229): pid=29000 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16411 res=0 [ 1043.187057] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:47:17 executing program 0: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x6) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e003d000000e8bd6efb250009000e000100400000ff050005001201", 0x2e}], 0x1}, 0x0) 17:47:17 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r2, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="10514f41291284113f37d6"], 0xb) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000100)=0x2, 0x4) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r0, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="540e04af865114a1000000752fb10c179b54982952ed17315a0ba2718da86fa40cac72882c2bd596aa7360b7f8d8b527fffa34830f403878ed52561ae204864219cfb97be5fce318f1b46e3f6170ce42eea63449521c76fdb0a73c7930dd7ddbad8a81d631287571ed"], 0xb) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000180)={{0x2, @name="8d7ed1dc68c680ba594d9c0a487889fad0b81eaa59ab6dc359c27396e192a286"}, 0x8, 0x700000000, 0x7cc}) sendfile(0xffffffffffffffff, r3, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0xffffffc0) 17:47:17 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x10a, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}]}, 0x40}}, 0x0) [ 1043.387191] Bluetooth: hci1: Frame reassembly failed (-84) [ 1043.412407] audit: type=1800 audit(1586540837.844:5230): pid=29019 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=16400 res=0 [ 1043.422083] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 1043.453668] Bluetooth: hci1: Frame reassembly failed (-84) [ 1043.491463] audit: type=1800 audit(1586540837.884:5231): pid=29030 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16405 res=0 [ 1043.635816] device veth1_macvtap left promiscuous mode [ 1043.954260] audit: type=1800 audit(1586540838.384:5232): pid=29019 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=16400 res=0 17:47:18 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x1) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r3, r4, 0x0, 0x200fff) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0xc, 0x0, 0x3}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000041}, 0x4000) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 17:47:18 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="10514f41291284113f37d6"], 0xb) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000040)={[0x2a, 0x66aa, 0x3, 0x6438, 0x1000, 0x4, 0xe364, 0x6, 0x7, 0x7f, 0x20, 0x8000, 0x3ff, 0x2f3, 0x2, 0x6], 0x0, 0x8000}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@ipv4={[], [], @multicast1}}, 0x20) [ 1044.828517] Bluetooth: hci0: command 0x1003 tx timeout [ 1044.833973] Bluetooth: hci0: sending frame failed (-49) [ 1045.388508] Bluetooth: hci1: command 0x1003 tx timeout [ 1045.398929] Bluetooth: hci1: sending frame failed (-49) [ 1046.908626] Bluetooth: hci0: command 0x1001 tx timeout [ 1046.921376] Bluetooth: hci0: sending frame failed (-49) [ 1047.468485] Bluetooth: hci1: command 0x1001 tx timeout [ 1047.486650] Bluetooth: hci1: sending frame failed (-49) [ 1048.988665] Bluetooth: hci0: command 0x1009 tx timeout [ 1049.548517] Bluetooth: hci1: command 0x1009 tx timeout 17:47:27 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x6) 17:47:27 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x140, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}]}, 0x40}}, 0x0) 17:47:27 executing program 5: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="ee9f84a43eccaf1315bb397d00c1b6dd820dd13916181dba620938cb30f1c21afe3d926298b25834e890092d642cafe5db21ba9494febcf66079b722e73be3a8708a3624250f9f59fbbe942997c6c1e83a34e5779e8a4f40fdb6ffe59ffe4903500d3cd8c8f3ed19ad176daf94cf7fcaf2922f8aab3becc60c8d39ddf43cd6d2e9301da3caa35719f25a83478559e0e891dcb756ee22964d03f37561f5797490a0b93506482822075ba96db35a440d046e44eb4a79986b518281609003b6fae04a18be9a83ce7efa2ab80f75c90d78f0b4179d674376db1f7ae8745641adcde0d245722744bcea2fac9445014ee2293985119573ffcc0c22eb0769de1e9e5db53aa3378a4426503010a7c6247265838211527a0132ccf883ee08a6ea1a785e47ce16663f1c744af49200d5f3bc326e7d9089a5f17d0ad05f06e48c205f9b6d087ba7d3b6745e65700c009572a65b4bfbf6687821bc723b61b5abe7357e68a9b0640bfb9c01000080000000000e840ecf379c576c05757d44b19de0e2aa364c42156219a72cc943a60f0410891ed134f35f5ff9b4cf3abbcb984436322358a7c9393724860d87253981f9e79dbeb789577ead0ede31e19a2b114a0e4d82b3e1023dd28b6382e67e3246d2912e55cf9928da32c1027cef7c6c610ea8fce149a7af20224b4e028601936ef9a78d80ff5567084ec128766e822d6124186d82e760128dd7de2653939d353c12f96deff3a28b022c784bd37df7f76640bcbcb01a4676d58b3e9c2baae66230e5f54a37527e8129d161b0c06f25648c55a7e5b2db528053c3e3864f41728b7935e575568ad114eb8c811bf19e07a398babbc64fbeab842688554783ed1551949a791e33799e59a34b6bdabc3458c379c735198292e5a272187449249d2c8a9aa58f3835a3e1716083bb0464cbe140d1587a21e4ec2ae1f3ad81134df55903ffb8e173646352915a2c706709cf46538978224c0d6dc437cbfc37abfbd1b76feb5ca3aeb1ac8cbd40d5ba896f79ee8f76b0809f59b86862648774d2ace98b825e7a465b5dd80e491965971e7797aba3968441c77717a24ca41efb160c030cfc8e", 0x309, 0x34f9}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[], 0x2e7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/mISDNtimer\x00', 0x101200, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000280)) open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x1) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001ac0)={&(0x7f0000000340)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000001a40)=[{&(0x7f00000003c0)=""/88, 0x58}, {&(0x7f0000001bc0)=""/4106, 0x100a}, {&(0x7f00000004c0)=""/205, 0xcd}, {&(0x7f00000005c0)=""/71, 0x47}, {&(0x7f0000001b00)=""/138, 0x8a}], 0x5, &(0x7f0000000440)}, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) unlink(&(0x7f0000000180)='./file0/file0\x00') sendfile(r0, r0, &(0x7f0000000480), 0xa198) semget$private(0x0, 0x0, 0x0) 17:47:27 executing program 0: fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) sched_setaffinity(0x0, 0x0, 0x0) getpid() fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x1ff, 0x1002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xe, 0xffffffffffffffff, 0x0) geteuid() fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000100)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x4, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000), 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x8}, 0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000000c0)=@assoc_id=r3, &(0x7f0000000140)=0x4) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_FLAGS={0x8, 0x8, 0x3778bcbaae6b531f}, @IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@ipv4_getaddr={0x2c, 0x16, 0x100, 0x70bd2a, 0x25dfdbfd, {0x2, 0x3f, 0x80, 0x0, r5}, [@IFA_LABEL={0x14, 0x3, 'vlan0\x00'}]}, 0x2c}}, 0x0) 17:47:27 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES32, @ANYRESHEX, @ANYBLOB="66bd153d9fca1f3d4ada8d641bd79bfc8d335a6cb07aba4492632ecf507ea5d58ff571fc0ea2005c2477a68b56286de7f6c39a20c4a03b0c12717f48e1c462ad12892885fb00598926e239e47a64d134e0856ec4babf8a91f13855c38d909045406c0d59e33fd28972bb492830f4e6ce007e6e91b0a5d7f8da81d7e4e6d84e0818cd9ef6aea2c58c2da5ba2053a5d31861b8c39d8e331fce650c08d036bc9abb8365d87261a5fa5ede2c15ba5066d6"], 0x0, 0xc5}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x4}, {&(0x7f0000000000)=""/6, 0xffffffffffffff2c}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1052.977978] audit: type=1800 audit(1586540847.404:5233): pid=29071 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=15986 res=0 [ 1053.000531] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:47:27 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x6) 17:47:27 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x16c, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}]}, 0x40}}, 0x0) 17:47:27 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r1, r2, 0x0, 0x200fff) setsockopt$inet6_tcp_int(r2, 0x6, 0x10, &(0x7f0000000000)=0x80000001, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) [ 1053.467904] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:47:28 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280)='/dev/bsg\x00', 0xa0c01, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f00000002c0)={{0x4, 0x2}, 0x0, 0x7, 0x401, {0x7, 0x1}, 0x7, 0xe70d}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x61a100, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x2) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r2, 0x0, 0x0) write$P9_RWSTAT(r2, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x200fff) r4 = syz_open_dev$vcsu(&(0x7f0000000100)='/dev/vcsu#\x00', 0x101, 0x440401) write$P9_RXATTRWALK(r4, &(0x7f0000000180)={0xf, 0x1f, 0x2, 0x6}, 0xf) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000080)=0xffffffc0) r5 = gettid() tkill(r5, 0x1000000000016) prlimit64(r5, 0x8, &(0x7f0000000200)={0x6, 0x8}, &(0x7f0000000240)) 17:47:28 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x6) [ 1053.534076] audit: type=1800 audit(1586540847.964:5234): pid=29105 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16033 res=0 17:47:28 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x1e8, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}]}, 0x40}}, 0x0) [ 1053.798184] audit: type=1800 audit(1586540848.224:5235): pid=29123 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16098 res=0 17:47:28 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x6) 17:47:28 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x49) lseek(r1, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="10514f41291284113f37d6"], 0xb) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f0000000040)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(0xffffffffffffffff) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = dup3(r2, r3, 0x0) dup2(r5, r4) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) [ 1053.904351] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:47:28 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x20a, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}]}, 0x40}}, 0x0) 17:47:28 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000001c0)) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x6) [ 1054.262484] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 1054.295639] audit: type=1800 audit(1586540848.724:5236): pid=29109 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16033 res=0 [ 1054.349492] Bluetooth: Invalid header checksum [ 1054.354738] Bluetooth: Invalid header checksum 17:47:28 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r0, &(0x7f00000071c0)=[{{&(0x7f00000010c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c}, 0x80, &(0x7f0000003400)=[{&(0x7f0000001140)=""/101, 0x65}, {}, {&(0x7f00000011c0)=""/159, 0x9f}, {&(0x7f0000001280)=""/4096, 0x1000}, {&(0x7f0000002280)=""/4096, 0x1000}, {&(0x7f0000003280)=""/7, 0x7}, {&(0x7f00000032c0)=""/175, 0xaf}, {&(0x7f0000003380)=""/57, 0x39}, {&(0x7f00000033c0)=""/33, 0x21}], 0x9, &(0x7f00000034c0)=""/195, 0xc3}, 0x101}, {{&(0x7f00000035c0)=@in6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000004680)=[{&(0x7f0000003640)=""/53, 0x35}, {&(0x7f0000003680)=""/4096, 0x1000}], 0x2}, 0x30}, {{&(0x7f00000046c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000005940)=[{&(0x7f0000004740)=""/135, 0x87}, {&(0x7f0000004800)=""/123, 0x7b}, {&(0x7f0000004880)=""/187, 0xbb}, {&(0x7f0000004940)=""/4096, 0x1000}], 0x4, &(0x7f0000005980)}, 0xab}, {{&(0x7f00000059c0)=@pppol2tpv3, 0x80, &(0x7f0000005b80)=[{&(0x7f0000005a40)=""/5, 0x5}, {&(0x7f0000005a80)=""/212, 0xd4}], 0x2, &(0x7f0000005bc0)=""/211, 0xd3}, 0x10000}, {{&(0x7f0000005cc0)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000005e00)=[{&(0x7f0000005d40)=""/145, 0x91}], 0x1, &(0x7f0000005e40)=""/41, 0x29}, 0x10001}, {{&(0x7f0000005e80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000006140)=[{&(0x7f0000005f00)=""/192, 0xc0}, {&(0x7f0000005fc0)=""/129, 0x81}, {&(0x7f0000006080)=""/174, 0xae}], 0x3}, 0x1ff}, {{&(0x7f0000006180)=@nfc, 0x80, &(0x7f00000065c0)=[{&(0x7f0000006200)=""/224, 0xe0}, {&(0x7f0000006300)=""/99, 0x63}, {&(0x7f0000006380)=""/114, 0x72}, {&(0x7f0000006400)=""/179, 0xb3}, {&(0x7f00000064c0)=""/2, 0x2}, {&(0x7f0000006500)=""/102, 0x66}, {&(0x7f0000006580)=""/63, 0x3f}], 0x7}, 0x1000}, {{&(0x7f0000006640)=@rc, 0x80, &(0x7f0000006bc0)=[{&(0x7f00000066c0)=""/81, 0x51}, {&(0x7f0000006740)=""/216, 0xd8}, {&(0x7f0000006840)=""/157, 0x9d}, {&(0x7f0000006900)=""/243, 0xf3}, {&(0x7f0000006a00)=""/205, 0xcd}, {&(0x7f0000006b00)=""/174, 0xae}], 0x6, &(0x7f0000006c40)=""/53, 0x35}, 0x10001}, {{&(0x7f0000006c80)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, 0x80, &(0x7f0000007100)=[{&(0x7f0000006d00)=""/199, 0xc7}, {&(0x7f0000006e00)=""/167, 0xa7}, {&(0x7f0000006ec0)=""/108, 0x6c}, {&(0x7f0000006f40)=""/212, 0xd4}, {&(0x7f0000007040)=""/36, 0x24}, {&(0x7f0000007080)=""/65, 0x41}], 0x6, &(0x7f0000007180)=""/3, 0x3}, 0x2}], 0x9, 0x40002000, &(0x7f0000007400)) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000007440)={{{@in6=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@dev}}, &(0x7f0000007540)=0xe8) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r3, r4, 0x0, 0x200fff) bind$xdp(r1, &(0x7f0000007580)={0x2c, 0x3, r2, 0x1e, r4}, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth1\x00', &(0x7f0000000080)=@ethtool_dump={0x3e, 0x3, 0x1fd54, 0x1000, "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"}}) [ 1054.480296] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 1054.516928] audit: type=1800 audit(1586540848.944:5237): pid=29161 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15827 res=0 [ 1054.581414] audit: type=1800 audit(1586540848.994:5238): pid=29161 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15827 res=0 17:47:30 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES32, @ANYRESHEX, @ANYBLOB="66bd153d9fca1f3d4ada8d641bd79bfc8d335a6cb07aba4492632ecf507ea5d58ff571fc0ea2005c2477a68b56286de7f6c39a20c4a03b0c12717f48e1c462ad12892885fb00598926e239e47a64d134e0856ec4babf8a91f13855c38d909045406c0d59e33fd28972bb492830f4e6ce007e6e91b0a5d7f8da81d7e4e6d84e0818cd9ef6aea2c58c2da5ba2053a5d31861b8c39d8e331fce650c08d036bc9abb8365d87261a5fa5ede2c15ba5066d6"], 0x0, 0xc5}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x4}, {&(0x7f0000000000)=""/6, 0xffffffffffffff2c}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:47:30 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x6) 17:47:30 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x214, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}]}, 0x40}}, 0x0) 17:47:30 executing program 0: ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, &(0x7f0000000000)={0x3, 0x1, 0x4}) syz_mount_image$jfs(&(0x7f0000000180)='jfs\x00', &(0x7f00000001c0)='./file0\x00', 0xb40, 0x0, 0x0, 0x0, 0x0) [ 1056.027852] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:47:31 executing program 0: writev(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x10000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f0000000100)=0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f00000000c0)={'veth1\x00', {0x2, 0x4e23, @multicast2}}) mq_open(0x0, 0x0, 0x0, 0x0) sysfs$3(0x3) io_destroy(r0) syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f00000001c0)={0x1, 0x1, 0x1000, 0x6e, &(0x7f0000000140)="8c175fbb36b1012cb735b627e96ab2c7e0de7f5ee3850f79f5f7cc13ffd750fae86d62275fa6dd4a5dfa6eb45e966128f7f29e73fe383aa232a90f22d2b7dc50dc8b37fe7e08e9742ee4534f5387f4ca223c96422214210a6f8f9fca428c2a659956b116a64b20df8e8c63f1cfdd", 0xad, 0x0, &(0x7f0000000280)="00945c74a386e32b06b8c4c83d470cfed2381e474a2e4c13c333ca51b4c84d0d575df64344e05cdbdc0697ae23eb48844dfc55428f5b82d422d6064a0d6e722a27c4bafdec37c5d2ab8c282d40515291057aea49c4daa37feb70fde3e80969349a00c8f1cef245732cd04491e0252560a783a2e611241aa6a57bfee944ea870c19c0280a89bc70c831bc123922a784e5d056f9dd9fb42e40c654b053e52374eec10081f531c6144f539a4d6881"}) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000340)={r3, 0x0, 0xffff, 0x0, 0xff, 0x1000, 0x3ff, 0xfff, {0x0, @in={{0x2, 0x4e21, @multicast1}}, 0x6, 0x0, 0xffff7738, 0x5}}, &(0x7f0000000040)=0xb0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, 0x0, 0x0) 17:47:31 executing program 5: socket$netlink(0x10, 0x3, 0x0) sysfs$1(0x1, &(0x7f0000000000)='procnodev#\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=@ipv6_getaddr={0x70, 0x16, 0x400, 0x70bd29, 0x25dfdbfd, {0xa, 0x38, 0x54, 0xfe}, [@IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, [], 0x3d}}, @IFA_CACHEINFO={0x14, 0x6, {0xe5, 0x1f, 0x1}}, @IFA_FLAGS={0x8, 0x8, 0x1}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @multicast2}}, @IFA_LOCAL={0x14, 0x2, @remote}]}, 0x70}}, 0x81) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000200)={0x5, &(0x7f0000000140)=[{0xfffe, 0x44, 0x3, 0x10000}, {0x4, 0x3, 0x5}, {0x40, 0x3, 0x0, 0x7}, {0x7, 0x3, 0x1, 0x7}, {0xdcc, 0x2, 0x1f}]}) lseek(r1, 0x2, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="10514f41291284113f37d6"], 0xb) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x5}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl(r7, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x100}]}}]}, 0x38}}, 0x0) 17:47:31 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x145) sendfile(0xffffffffffffffff, r2, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0xffffffc0) 17:47:31 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x6) 17:47:31 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x25a, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}]}, 0x40}}, 0x0) [ 1056.750714] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 1056.854392] audit: type=1800 audit(1586540851.284:5239): pid=29231 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16416 res=0 17:47:31 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x6) 17:47:31 executing program 0: syz_mount_image$minix(&(0x7f0000000080)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x7, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600b42e006000a0090040300001af5c96824", 0x12, 0x400}, {&(0x7f0000000780)="01943a062d37e3c09440ce0bec961db41dc5603663649f6bb17244cb70e4b0b352acf14a1ced0819a775c954d4910bf37b7a6a5cad3918afc109859be382a5b5c99779d2d56c8d1b2dcccfa77306b0578b122693fc2f8bd7b857da0a3e93999c7327428c2d67bd59efa2b682d1f73173738d7eafb0a1a185a5a1e21991f232f6f206afbbecf513255691045b3512c666da4bc7256ee66811e6e5f84e9fb75f754e0c4a9098674fa3713f78fb9b7aead6243912e4d89954b4e88a38250b0eb9fa6b70a549f9e9ce074e2503493e38a21d20849bcee1a2ca8ea87f61d0f3818d9fca18381917c2cf7276a9f0e2c86db64241e376aeadf1d6008cdcf5b9bef57b1ffb73f5203898b33d6a640f2e44e459de6d3343a62fc85e1d026ca60297f18a4a0d81f295229bb7a29cc8e4f350c2169a1931e279e6df30359ee9dd02cf358297c918ad713ce1d27f6318c4dd91a6b62922653dabad43c77c08eb6443e8f018d9a1977fa191c49f75ba4e8b0ae2423b4cc5b2ff83e846572aa051234f0c664831353abb98b72841085ce235a69381208d2c53365718af7b6eb2a2d1c72ef3c0a9d69f067d456fd0df7c6190ad1edc4ded0945cf92ce9153df5d52ad2f020b5b6164ef4411412a48c11729ef780db0d34e87539587cb2cddee9183d56f9ce0771d80d5cec684791f5bff83cc7c06a9c7b3ffe716f5ed7248c11c6043a05e9649b5ef1c48cb773e99f49326ca94a1cd19d52ff261150a61d7843833ca7086978b9156aa0a6309a7f77eccf6bda0a1b10ee1aa0fa66f25f3100b3c44228d9ba58e62bb0d5c54b96a3319d7ee4129757a0d56d654266ffbe4270b4154babf6c161f1844dc7ab7bd5c6b6ae290035bbcd7f751da06a4369f01cde305303051e8fe1afcef93f58ef9b7fd1b71f060fea06aa5f8e11759c4aca09668d2d0d70312e17d19283936e925a5250cc4a5cba83a824945cddf4a4cbbfd3203add1478937570500000000000000b7fcf98cea438214d57e26347fceeee29ff5b2e2b0ed63fa42816a40a7c55536ec817dde53347f95de0b81", 0x2f1, 0x4511}], 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="10514f41291284113f37d6"], 0xb) read(r0, &(0x7f0000000040)=""/42, 0x2a) 17:47:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x3, 0x0, 0x0, 0x3b2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb01c4001800e00000000300000000000100000903000000008e1504aef0279d6efc4c76785c5a0090a732b6ab4b7087110538c8a78893b99d64cade83425d"], 0x0, 0x40}, 0x20) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6(0xa, 0x400000000001, 0x0) close(r5) r6 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r5, r6, 0x0, 0x200fff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r6, 0xc4c85512, &(0x7f00000004c0)={{0xa, 0x6, 0x8, 0x67b, 'syz0\x00', 0x3f}, 0x1, [0xffffffff, 0x0, 0x0, 0x9, 0x66, 0x7, 0x10001, 0x22ce, 0x7f, 0x808, 0x0, 0x20, 0x800, 0x3f, 0x3f, 0x934f, 0x2, 0x7fffffff, 0x3, 0xc8, 0x9, 0x2, 0x7, 0xffff, 0x23c9000000000, 0xffffffff, 0x0, 0x3, 0x97, 0x9, 0x100000000, 0x7ff, 0x6, 0x4, 0x4, 0x262, 0x7, 0x1f, 0x6, 0xffff, 0x800, 0x2, 0x25d, 0x6, 0x1f, 0xaa8, 0x100, 0xb30, 0x7f, 0x4, 0xfff, 0x4, 0x3, 0x9, 0x6, 0x80, 0x7, 0x9, 0x9, 0xff, 0x2, 0x4, 0x8, 0x200, 0x4, 0x10001, 0x6, 0x4, 0x6, 0x0, 0x3f, 0xd45, 0x1bc800000000, 0x5, 0x800, 0x7, 0x5, 0x200, 0x9, 0x2, 0x800, 0x2, 0x10001, 0x1f, 0x7, 0x9, 0x5c3, 0x4, 0x9, 0xde3, 0x0, 0xfffffffffffffffb, 0x0, 0x5, 0x6, 0x1, 0x1, 0x5, 0x400, 0x0, 0xfffffffffffffff8, 0x3ff, 0x6, 0x4, 0x0, 0x0, 0xffffffffffffffe1, 0x1, 0x1, 0x0, 0x0, 0x37, 0x80000000, 0x3f33, 0x9, 0x1, 0x19a, 0x3, 0x4, 0x5, 0x81, 0x7ff, 0x9, 0x3, 0x50b5, 0xff, 0x0, 0x3]}) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x100000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0}, 0x0) [ 1057.008548] audit: type=1800 audit(1586540851.414:5240): pid=29231 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16416 res=0 [ 1057.147467] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 1057.191168] minix_free_inode: bit 1 already cleared [ 1057.206573] audit: type=1800 audit(1586540851.634:5241): pid=29251 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=16350 res=0 [ 1057.275478] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 1057.283910] minix_free_inode: bit 1 already cleared [ 1057.318252] audit: type=1800 audit(1586540851.744:5242): pid=29264 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=16350 res=0 17:47:33 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYBLOB="66bd153d9fca1f3d4ada8d641bd79bfc8d335a6cb07aba4492632ecf507ea5d58ff571fc0ea2005c2477a68b56286de7f6c39a20c4a03b0c12717f48e1c462ad12892885fb00598926e239e47a64d134e0856ec4babf8a91f13855c38d909045406c0d59e33fd28972bb492830f4e6ce007e6e91b0a5d7f8da81d7e4e6d84e0818cd9ef6aea2c58c2da5ba2053a5d31861b8c39d8e331fce650c08d036bc9abb8365d87261a5fa5ede2c15ba5066d6"], 0x0, 0xc9}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x4}, {&(0x7f0000000000)=""/6, 0xffffffffffffff2c}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:47:33 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x101) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000180), &(0x7f0000000200)=0x4) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0xffffffc0) 17:47:33 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x26c, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}]}, 0x40}}, 0x0) 17:47:33 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000001c0)) write$P9_RWSTAT(0xffffffffffffffff, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x6) 17:47:33 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) futimesat(0xffffffffffffffff, 0x0, 0x0) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000006c0)=0x2000000000000001, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, 0x0, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000200)=0x7fff, 0x4) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xc6dd, 0xf087}, 0x14) splice(r0, 0x0, r2, 0x0, 0x4ffe1, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="10514f41291284113f37d6"], 0xb) r3 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000180)=@name, &(0x7f00000001c0)=0x10, 0x800) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000280)=0x2) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40008}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4800}, 0xc041) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x202f00, 0x0) ioctl$IOC_PR_RELEASE(r4, 0x401070ca, &(0x7f0000000140)={0x0, 0x4, 0x1}) socket(0x0, 0x0, 0x0) 17:47:33 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0xffffff9b) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r1, r2, 0x0, 0x200fff) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) lsetxattr$trusted_overlay_opaque(&(0x7f0000000100)='./bus\x00', &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f0000000180)='y\x00', 0x2, 0x3) keyctl$get_persistent(0x16, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="2c6066ca006f3d", @ANYRESHEX, @ANYBLOB=',access=', @ANYRESDEC=0x0, @ANYBLOB=',cachetag?threaded\x00,cache=fscache,cachetag=,rootcontext=staff_u,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r4 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r3, r4, 0x0, 0x200fff) fallocate(r3, 0x20, 0x1e8, 0x0) ioctl$TIOCGISO7816(r0, 0x80285442, &(0x7f00000000c0)) r5 = socket$inet6(0xa, 0x400000000001, 0x0) close(r5) r6 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r5, r6, 0x0, 0x200fff) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000080)={0x24000, 0x14, 0x1, 0x5, 0x1}, 0x14) [ 1059.197173] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 1059.293577] audit: type=1800 audit(1586540853.724:5243): pid=29290 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16529 res=0 [ 1059.324502] 9pnet: Insufficient options for proto=fd 17:47:33 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000001c0)) write$P9_RWSTAT(0xffffffffffffffff, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x6) [ 1059.411298] audit: type=1800 audit(1586540853.784:5244): pid=29290 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16529 res=0 17:47:33 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x270, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}]}, 0x40}}, 0x0) [ 1059.469428] Bluetooth: Invalid header checksum [ 1059.474391] Bluetooth: Invalid header checksum [ 1059.506167] Bluetooth: Invalid header checksum [ 1059.566902] audit: type=1800 audit(1586540853.794:5245): pid=29290 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16529 res=0 [ 1059.648704] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 1059.654107] audit: type=1800 audit(1586540853.934:5246): pid=29303 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16561 res=0 17:47:34 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000001c0)) write$P9_RWSTAT(0xffffffffffffffff, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x6) 17:47:34 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x4981, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0xffffffc0) [ 1059.817350] audit: type=1800 audit(1586540854.114:5247): pid=29296 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16561 res=0 [ 1059.959291] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 1059.967689] audit: type=1800 audit(1586540854.394:5248): pid=29320 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16448 res=0 17:47:34 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000001c0)) write$P9_RWSTAT(r1, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x6) [ 1060.044003] audit: type=1800 audit(1586540854.454:5249): pid=29329 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16448 res=0 17:47:34 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f0000000100)) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0xffffffc0) [ 1060.112626] 9pnet: Insufficient options for proto=fd [ 1060.186121] audit: type=1800 audit(1586540854.504:5250): pid=29334 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16529 res=0 [ 1060.221164] audit: type=1800 audit(1586540854.544:5251): pid=29333 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16529 res=0 [ 1060.244709] audit: type=1800 audit(1586540854.604:5252): pid=29333 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16529 res=0 [ 1060.330774] Bluetooth: Invalid header checksum [ 1060.335489] Bluetooth: Invalid header checksum [ 1060.363917] Bluetooth: Invalid header checksum 17:47:36 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYBLOB="66bd153d9fca1f3d4ada8d641bd79bfc8d335a6cb07aba4492632ecf507ea5d58ff571fc0ea2005c2477a68b56286de7f6c39a20c4a03b0c12717f48e1c462ad12892885fb00598926e239e47a64d134e0856ec4babf8a91f13855c38d909045406c0d59e33fd28972bb492830f4e6ce007e6e91b0a5d7f8da81d7e4e6d84e0818cd9ef6aea2c58c2da5ba2053a5d31861b8c39d8e331fce650c08d036bc9abb8365d87261a5fa5ede2c15ba5066d6"], 0x0, 0xc9}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x4}, {&(0x7f0000000000)=""/6, 0xffffffffffffff2c}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:47:36 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x272, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}]}, 0x40}}, 0x0) 17:47:36 executing program 5: syz_read_part_table(0x8c, 0x1, &(0x7f0000000140)=[{&(0x7f0000000180)="026368006c0fe060db60cc0fff0ffff600d6000000e08128b14700000000d59863d20000000002000f2020cc00000000ff07006900000300000000000000000000000000880653d4ea00000000000000000000000000000000000000000000000000008a6e27", 0x66, 0x1a0}]) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) 17:47:36 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000001c0)) write$P9_RWSTAT(r1, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x6) 17:47:36 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="10514f41291284113f37d6"], 0xb) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f0000000200)=[{0x1, 0x31, 0xff, 0x8}]}, 0x10) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff"], 0x7) r3 = dup(r2) r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) r5 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r4, r5, 0x0, 0x200fff) statx(r5, &(0x7f00000000c0)='./file0\x00', 0x6000, 0x4, &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) 17:47:36 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800000, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000200)={{0x6, 0x5, 0x3f, 0x3, '\x00', 0x591}, 0x1, [0x0, 0xaa, 0x0, 0x80000001, 0x549e, 0x1, 0x7, 0x0, 0xffff, 0xfffffffffffffffc, 0x1c6, 0x5, 0xfffffffffffffff7, 0x7fff, 0x2, 0x4, 0x1f, 0x5, 0x1, 0x800, 0x8, 0x5, 0x4, 0x5, 0x1, 0xc9a, 0x9, 0x0, 0x4, 0x7, 0x4, 0x2, 0x1679290f, 0x401, 0x5327, 0x9, 0x5, 0xb703, 0x2, 0x4, 0xef8, 0x4, 0x6, 0xcf70, 0x5, 0xee26, 0x101, 0x0, 0x5, 0x2, 0x3b4, 0xfff, 0x6, 0xfffffffffffffff8, 0x0, 0x2, 0x5, 0x7, 0x1, 0x5, 0x1, 0x1, 0x5, 0x1, 0x8, 0x6, 0x8, 0x4, 0x4, 0xa5a5, 0x7ff, 0xfff, 0x7fff, 0xffffffffffff8871, 0x5, 0x400, 0x7f, 0xf0, 0x8, 0x7, 0x1, 0xfffffffffffffffa, 0x4, 0x0, 0x5, 0x6, 0x5, 0x6, 0x4, 0x9, 0x0, 0xffff, 0x100, 0x100, 0x7d04, 0x4, 0x5, 0x6, 0x7fffffff, 0x9d, 0x2, 0x9, 0x10001, 0x0, 0x2, 0x0, 0x9, 0x480, 0x7, 0x9, 0x40, 0x9, 0x8, 0x80000000, 0x1, 0x101, 0x7, 0xffff, 0x704, 0xff, 0x0, 0xffffffffffff8001, 0x7f, 0xf19e, 0x1, 0xf6, 0x1, 0xbc]}) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0xffffffc0) 17:47:36 executing program 5: mknod(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) syz_genetlink_get_family_id$ipvs(0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x8001, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="225ca5a6323639675ae8201de4072196afcca1b3113cd07e8f0cef22fce6f8df377d786165f85c3c8868fe17b65e143829948143131d776fe1c6b20460032236dc6a17acb1843e3d6506de0bbe9fdef71662dd774ac2145ad8755062bcbd604af61c33d0ad56c3a3f52701f75e23d7e1887a17adfe43740b21fb89793bf4f2850224b576ef0b5853c8bb1300ae8077c72c7bb24b6c5c1db52a400000cc61b04dd0af36406103a82f6d0219646e46e93cc8d35ccf346b81267f8ed76200"/203, @ANYRESHEX=r2]) [ 1062.420370] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 1062.469062] Bluetooth: Invalid header checksum [ 1062.473827] Bluetooth: Invalid header checksum [ 1062.486782] Bluetooth: Invalid header checksum 17:47:37 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000001c0)) write$P9_RWSTAT(r1, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x6) [ 1062.607797] 9pnet: Insufficient options for proto=fd [ 1062.649819] 9pnet: Insufficient options for proto=fd 17:47:37 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x200fff) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000080)=0xffffffc0) 17:47:37 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x2aa, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}]}, 0x40}}, 0x0) 17:47:37 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) io_setup(0x4, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x100000001) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="10590f84113f1d79ac7ef1ae7bbd996e59d681331fb997299ca90b58d25a4af2962bba508e04b7104304543b26d5274ef2600ac3cc18112c3ebd2c7ed96366f316ab6c91335f11f5ca5188"], 0xb) ioctl$VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000080)={0xff8, 0x31364d59, 0x2, @stepwise={0x1000, 0x5, 0x4, 0x3, 0x3, 0x69}}) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r1, r2, 0x0, 0x200fff) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x1, @remote, 'ip6gre0\x00'}}) listen(r0, 0x400000001ffffffd) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000005}}], 0x4000000000000d0, 0x0) 17:47:37 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000001c0)) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x6) [ 1062.896101] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 1062.989178] Bluetooth: Invalid header checksum [ 1062.994508] Bluetooth: Invalid header checksum 17:47:39 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYBLOB="66bd153d9fca1f3d4ada8d641bd79bfc8d335a6cb07aba4492632ecf507ea5d58ff571fc0ea2005c2477a68b56286de7f6c39a20c4a03b0c12717f48e1c462ad12892885fb00598926e239e47a64d134e0856ec4babf8a91f13855c38d909045406c0d59e33fd28972bb492830f4e6ce007e6e91b0a5d7f8da81d7e4e6d84e0818cd9ef6aea2c58c2da5ba2053a5d31861b8c39d8e331fce650c08d036bc9abb8365d87261a5fa5ede2c15ba5066d6"], 0x0, 0xc9}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x4}, {&(0x7f0000000000)=""/6, 0xffffffffffffff2c}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:47:39 executing program 0: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0xdd}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0xe0, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "ec"}], 0x18}}], 0x7, 0x0) 17:47:39 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) fadvise64(r2, 0x3, 0x3, 0x3) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) r4 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0xffffffc0) 17:47:39 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000001c0)) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x6) 17:47:39 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x2b8, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}]}, 0x40}}, 0x0) 17:47:39 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$SIOCAX25GETINFOOLD(r2, 0x89e9, &(0x7f0000000000)) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f00000000c0)={{0x77359400}, 0x12, 0x0, 0x2}, 0x6a) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r3, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="102f9f8a25389251de3553"], 0xb) ioctl$FIONREAD(r3, 0x541b, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0x40a85321, &(0x7f0000000100)={{0xf8}, 'port0\x00', 0x80, 0xa1802, 0x2, 0x100, 0x7f, 0x401, 0x3, 0x0, 0x1, 0x9}) [ 1065.341030] input: syz0 as /devices/virtual/input/input10 [ 1065.454632] kauditd_printk_skb: 10 callbacks suppressed [ 1065.454646] audit: type=1800 audit(1586540859.884:5263): pid=29433 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16913 res=0 [ 1065.483152] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 1065.529320] Bluetooth: Invalid header checksum [ 1065.536557] Bluetooth: Invalid header checksum [ 1065.561468] input: syz0 as /devices/virtual/input/input11 17:47:40 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000001c0)) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x6) [ 1065.625791] audit: type=1800 audit(1586540859.954:5264): pid=29443 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16913 res=0 [ 1065.752359] audit: type=1800 audit(1586540860.104:5265): pid=29443 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16913 res=0 17:47:40 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0xe) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r2, 0x0, 0x0) write$P9_RWSTAT(r2, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r3, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1029122000000000000000"], 0xb) close(0xffffffffffffffff) r4 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0xffffffc0) 17:47:40 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x5010c0, 0x0) perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000000), 0x4}, 0x0, 0x1523214, 0x0, 0x0, 0x400000000000}, 0x0, 0x4, r0, 0xa) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) getresgid(&(0x7f00000002c0), 0x0, &(0x7f0000000340)=0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="10514fd1b6b48d90e98f15339a4941291284113f37d6"], 0xb) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000080)=0x4) fchown(r1, 0x0, r2) r3 = socket(0x1f, 0x2, 0x0) getresgid(&(0x7f00000002c0), 0x0, &(0x7f0000000340)) fchown(r3, 0x0, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) getresgid(0x0, 0x0, &(0x7f0000000340)) fchown(r4, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) openat$vhci(0xffffffffffffff9c, 0x0, 0x630000) connect$inet6(0xffffffffffffffff, &(0x7f0000004540)={0xa, 0x4e20, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000380)}, {&(0x7f0000000480)}, {0x0}, {0x0}, {&(0x7f00000006c0)}, {0x0}], 0x6}, 0x24000080) sendmmsg(0xffffffffffffffff, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000001500)=[{0x0}, {&(0x7f00000000c0)}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a7", 0x79}, {0x0}], 0x4, 0x0, 0x0, 0xffff000c}}], 0x1, 0x4000000) 17:47:40 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}]}, 0x40}}, 0x0) [ 1065.869564] audit: type=1800 audit(1586540860.104:5266): pid=29443 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16913 res=0 [ 1065.959065] Bluetooth: Invalid header checksum [ 1065.964011] Bluetooth: Invalid header checksum 17:47:40 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) pipe2(&(0x7f0000000000), 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xebb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}}, 0x0) [ 1065.988664] audit: type=1800 audit(1586540860.374:5267): pid=29471 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16610 res=0 17:47:40 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000001c0)) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x6) [ 1066.056069] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 1066.139707] audit: type=1800 audit(1586540860.474:5268): pid=29480 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16610 res=0 [ 1066.242292] audit: type=1800 audit(1586540860.524:5269): pid=29480 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16610 res=0 [ 1066.266501] device bridge0 entered promiscuous mode [ 1066.298283] audit: type=1800 audit(1586540860.544:5270): pid=29480 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16610 res=0 [ 1066.299664] bridge0: port 3(macvtap1) entered blocking state [ 1066.399411] bridge0: port 3(macvtap1) entered disabled state [ 1066.434722] device bridge0 left promiscuous mode [ 1067.065534] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:47:42 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES32, @ANYPTR64, @ANYRESHEX, @ANYBLOB="66bd153d9fca1f3d4ada8d641bd79bfc8d335a6cb07aba4492632ecf507ea5d58ff571fc0ea2005c2477a68b56286de7f6c39a20c4a03b0c12717f48e1c462ad12892885fb00598926e239e47a64d134e0856ec4babf8a91f13855c38d909045406c0d59e33fd28972bb492830f4e6ce007e6e91b0a5d7f8da81d7e4e6d84e0818cd9ef6aea2c58c2da5ba2053a5d31861b8c39d8e331fce650c08d036bc9abb8365d87261a5fa5ede2c15ba5066d6"], 0x0, 0xcd}, 0x20) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x4}, {&(0x7f0000000000)=""/6, 0xffffffffffffff2c}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:47:42 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x4c0000, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000200)={0x80000001, 0x7, "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"}) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0xffffffc0) 17:47:42 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000001c0)) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x6) 17:47:42 executing program 0: r0 = perf_event_open(&(0x7f00000003c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x3}, 0x0, 0xf9b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000040)={0x990000, 0x1fb, 0xffffff01, r0, 0x0, &(0x7f0000000000)={0x98090e, 0x3, [], @value=0x1}}) ioctl$RTC_VL_READ(r1, 0x80047013, &(0x7f0000000080)) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x2381c0, 0x0) io_setup(0x20, &(0x7f0000000440)) io_destroy(0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, 0x0, 0x0) write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) ioctl$TUNSETGROUP(r1, 0x400454ce, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x404e21, 0x2, @ipv4={[], [], @multicast2}}, 0x1c) ioctl$VIDIOC_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000300)={0x40, 0x0, [], {0x0, @reserved}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000240)={0x0, @in6={{0x2, 0x4e20, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x9c) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0xfea2, 0x20000802, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r3, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x1f4, 0x0, 0xffffffd8) getsockname$l2tp(r3, &(0x7f0000000140), &(0x7f0000000180)=0x10) 17:47:42 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000140)={0x6, &(0x7f00000003c0)="69e3fa92ff9c"}) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0x101000}) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000040)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000fb], 0x10000}) r4 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x2, 0xc0082) ioctl$RTC_WIE_ON(r4, 0x700f) ioctl$KVM_RUN(r3, 0xae80, 0x0) 17:47:42 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x312, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}]}, 0x40}}, 0x0) 17:47:42 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES32, @ANYPTR64, @ANYRESHEX, @ANYBLOB="66bd153d9fca1f3d4ada8d641bd79bfc8d335a6cb07aba4492632ecf507ea5d58ff571fc0ea2005c2477a68b56286de7f6c39a20c4a03b0c12717f48e1c462ad12892885fb00598926e239e47a64d134e0856ec4babf8a91f13855c38d909045406c0d59e33fd28972bb492830f4e6ce007e6e91b0a5d7f8da81d7e4e6d84e0818cd9ef6aea2c58c2da5ba2053a5d31861b8c39d8e331fce650c08d036bc9abb8365d87261a5fa5ede2c15ba5066d6"], 0x0, 0xcd}, 0x20) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x4}, {&(0x7f0000000000)=""/6, 0xffffffffffffff2c}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1068.536652] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:47:43 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000001c0)) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x6) 17:47:43 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x0, 0x0, 0x0, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="ff0001049c84c9e1b33dd09c27f87ede4b4a5b2a82b0a843b46e46264028d1210885151acdaf8576c869dbbf10d4", @ANYBLOB="62dcf46771767df831e8fc3f195faa15ed0bfa00c9571d870e7fb3ffd2cfbf3a87d3e7eb63c450db56076f6b6f20f7fffffff56977778a"], 0x2}, 0x1, 0x0, 0x0, 0x4040000}, 0x4) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) r1 = socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='user\x00') r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.stat\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430) close(r2) r4 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r4, 0x0, 0x200fff) accept$nfc_llcp(r4, &(0x7f0000000100), &(0x7f0000000000)=0x60) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xe600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x0, 0x20000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @local, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x40}}, 0x2, 0xfffa, 0x0, 0x0, 0x6221a69}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x8031, 0xffffffffffffffff, 0xbbd11000) [ 1068.670311] audit: type=1800 audit(1586540863.104:5271): pid=29528 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16977 res=0 17:47:43 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES32, @ANYPTR64, @ANYRESHEX, @ANYBLOB="66bd153d9fca1f3d4ada8d641bd79bfc8d335a6cb07aba4492632ecf507ea5d58ff571fc0ea2005c2477a68b56286de7f6c39a20c4a03b0c12717f48e1c462ad12892885fb00598926e239e47a64d134e0856ec4babf8a91f13855c38d909045406c0d59e33fd28972bb492830f4e6ce007e6e91b0a5d7f8da81d7e4e6d84e0818cd9ef6aea2c58c2da5ba2053a5d31861b8c39d8e331fce650c08d036bc9abb8365d87261a5fa5ede2c15ba5066d6"], 0x0, 0xcd}, 0x20) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x4}, {&(0x7f0000000000)=""/6, 0xffffffffffffff2c}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:47:43 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES32, @ANYPTR64, @ANYRESHEX, @ANYBLOB="66bd153d9fca1f3d4ada8d641bd79bfc8d335a6cb07aba4492632ecf507ea5d58ff571fc0ea2005c2477a68b56286de7f6c39a20c4a03b0c12717f48e1c462ad12892885fb00598926e239e47a64d134e0856ec4babf8a91f13855c38d909045406c0d59e33fd28972bb492830f4e6ce007e6e91b0a5d7f8da81d7e4e6d84e0818cd9ef6aea2c58c2da5ba2053a5d31861b8c39d8e331fce650c08d036bc9abb8365d87261a5fa5ede2c15ba5066d6"], 0x0, 0xcd}, 0x20) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x4}, {&(0x7f0000000000)=""/6, 0xffffffffffffff2c}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1068.820253] audit: type=1800 audit(1586540863.254:5272): pid=29546 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16977 res=0 17:47:43 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') close(0xffffffffffffffff) r2 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x200fff) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080)=0xffffffc0) 17:47:43 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES32, @ANYPTR64, @ANYRESHEX, @ANYBLOB="66bd153d9fca1f3d4ada8d641bd79bfc8d335a6cb07aba4492632ecf507ea5d58ff571fc0ea2005c2477a68b56286de7f6c39a20c4a03b0c12717f48e1c462ad12892885fb00598926e239e47a64d134e0856ec4babf8a91f13855c38d909045406c0d59e33fd28972bb492830f4e6ce007e6e91b0a5d7f8da81d7e4e6d84e0818cd9ef6aea2c58c2da5ba2053a5d31861b8c39d8e331fce650c08d036bc9abb8365d87261a5fa5ede2c15ba5066d6"], 0x0, 0xcd}, 0x20) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x4}, {&(0x7f0000000000)=""/6, 0xffffffffffffff2c}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1068.999042] Bluetooth: Invalid header checksum [ 1069.003963] Bluetooth: Invalid header checksum [ 1069.052547] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 17:47:43 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x2) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000001c0)) write$P9_RWSTAT(r1, &(0x7f0000000000)={0x7}, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140)='wireguard\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200fff) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000100)=0x6) 17:47:43 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES32, @ANYPTR64, @ANYRESHEX, @ANYBLOB="66bd153d9fca1f3d4ada8d641bd79bfc8d335a6cb07aba4492632ecf507ea5d58ff571fc0ea2005c2477a68b56286de7f6c39a20c4a03b0c12717f48e1c462ad12892885fb00598926e239e47a64d134e0856ec4babf8a91f13855c38d909045406c0d59e33fd28972bb492830f4e6ce007e6e91b0a5d7f8da81d7e4e6d84e0818cd9ef6aea2c58c2da5ba2053a5d31861b8c39d8e331fce650c08d036bc9abb8365d87261a5fa5ede2c15ba5066d6"], 0x0, 0xcd}, 0x20) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0, 0x4}, {&(0x7f0000000000)=""/6, 0xffffffffffffff2c}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:47:43 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') fchdir(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r3, 0x0, 0x200fff) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x3e6, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}]}, 0x40}}, 0x0) [ 1069.269662] Bluetooth: Invalid header checksum [ 1069.274840] Bluetooth: Invalid header checksum [ 1069.313428] ================================================================== [ 1069.321361] BUG: KASAN: use-after-free in h5_rx_3wire_hdr+0x38c/0x3b0 [ 1069.328015] Read of size 8 at addr ffff88809b3ed3d8 by task syz-executor.2/29580 [ 1069.335822] [ 1069.337480] CPU: 1 PID: 29580 Comm: syz-executor.2 Not tainted 4.19.114-syzkaller #0 [ 1069.345389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1069.354819] Call Trace: [ 1069.357470] dump_stack+0x188/0x20d [ 1069.361951] ? h5_rx_3wire_hdr+0x38c/0x3b0 [ 1069.366302] print_address_description.cold+0x7c/0x212 [ 1069.371721] ? h5_rx_3wire_hdr+0x38c/0x3b0 [ 1069.375999] kasan_report.cold+0x88/0x2b9 [ 1069.380369] h5_rx_3wire_hdr+0x38c/0x3b0 [ 1069.384639] ? __ldsem_down_read_nested+0xe2/0x720 [ 1069.389613] h5_recv+0x2d4/0x460 [ 1069.393008] ? h5_slip_one_byte+0x1c0/0x1c0 [ 1069.397349] ? __lock_is_held+0xad/0x140 [ 1069.401510] hci_uart_tty_receive+0x21d/0x520 [ 1069.406383] ? hci_uart_write_work+0x6f0/0x6f0 [ 1069.410993] tty_ioctl+0xe0a/0x1420 [ 1069.414665] ? tty_vhangup+0x30/0x30 [ 1069.418435] ? mark_held_locks+0xf0/0xf0 [ 1069.422527] ? mark_held_locks+0xf0/0xf0 [ 1069.426629] ? tty_vhangup+0x30/0x30 [ 1069.430515] do_vfs_ioctl+0xcda/0x12e0 [ 1069.434564] ? selinux_file_ioctl+0x46c/0x5d0 [ 1069.439088] ? selinux_file_ioctl+0x125/0x5d0 [ 1069.443862] ? check_preemption_disabled+0x41/0x280 [ 1069.449807] ? ioctl_preallocate+0x200/0x200 [ 1069.454271] ? selinux_file_mprotect+0x600/0x600 [ 1069.459055] ? __fget+0x340/0x510 [ 1069.462555] ? iterate_fd+0x350/0x350 [ 1069.464030] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 1069.466381] ? check_preemption_disabled+0x41/0x280 [ 1069.466433] ? security_file_ioctl+0x6c/0xb0 [ 1069.466459] ksys_ioctl+0x9b/0xc0 [ 1069.466478] __x64_sys_ioctl+0x6f/0xb0 [ 1069.490668] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 1069.495306] do_syscall_64+0xf9/0x620 [ 1069.499171] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1069.504400] RIP: 0033:0x45c889 [ 1069.507614] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1069.526630] RSP: 002b:00007f98896e3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1069.534365] RAX: ffffffffffffffda RBX: 00007f98896e46d4 RCX: 000000000045c889 [ 1069.541687] RDX: 0000000020000080 RSI: 0000000000005412 RDI: 0000000000000003 [ 1069.548980] RBP: 000000000076bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1069.556364] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1069.563688] R13: 0000000000000582 R14: 00000000004c81b7 R15: 000000000076bfac [ 1069.570989] [ 1069.572650] Allocated by task 22118: [ 1069.576496] kasan_kmalloc+0xbf/0xe0 [ 1069.580222] kmem_cache_alloc_node+0x148/0x730 [ 1069.584909] __alloc_skb+0xba/0x5b0 [ 1069.588556] h5_rx_pkt_start+0xcb/0x270 [ 1069.592568] h5_recv+0x2d4/0x460 [ 1069.595980] hci_uart_tty_receive+0x21d/0x520 [ 1069.600500] tty_ldisc_receive_buf+0x14a/0x190 [ 1069.605104] tty_port_default_receive_buf+0x78/0xa0 [ 1069.610155] flush_to_ldisc+0x21d/0x390 [ 1069.614147] process_one_work+0x91f/0x1640 [ 1069.618405] worker_thread+0x96/0xe20 [ 1069.622240] kthread+0x34a/0x420 [ 1069.625622] ret_from_fork+0x24/0x30 [ 1069.629337] [ 1069.630974] Freed by task 22118: [ 1069.634361] __kasan_slab_free+0xf7/0x140 [ 1069.638534] kmem_cache_free+0x7f/0x260 [ 1069.642791] kfree_skbmem+0xc1/0x140 [ 1069.646521] kfree_skb+0xe9/0x390 [ 1069.649990] h5_reset_rx+0x47/0x100 [ 1069.653746] h5_rx_3wire_hdr+0x2ee/0x3b0 [ 1069.657831] h5_recv+0x2d4/0x460 [ 1069.661217] hci_uart_tty_receive+0x21d/0x520 [ 1069.665760] tty_ldisc_receive_buf+0x14a/0x190 [ 1069.670905] tty_port_default_receive_buf+0x78/0xa0 [ 1069.676327] flush_to_ldisc+0x21d/0x390 [ 1069.680336] process_one_work+0x91f/0x1640 [ 1069.684590] worker_thread+0x96/0xe20 [ 1069.688413] kthread+0x34a/0x420 [ 1069.691799] ret_from_fork+0x24/0x30 [ 1069.695517] [ 1069.697165] The buggy address belongs to the object at ffff88809b3ed300 [ 1069.697165] which belongs to the cache skbuff_head_cache of size 232 [ 1069.710370] The buggy address is located 216 bytes inside of [ 1069.710370] 232-byte region [ffff88809b3ed300, ffff88809b3ed3e8) [ 1069.722264] The buggy address belongs to the page: [ 1069.727232] page:ffffea00026cfb40 count:1 mapcount:0 mapping:ffff8880a9fb5ac0 index:0x0 [ 1069.735396] flags: 0xfffe0000000100(slab) [ 1069.739602] raw: 00fffe0000000100 ffffea00027b0ec8 ffffea0002a24388 ffff8880a9fb5ac0 [ 1069.747649] raw: 0000000000000000 ffff88809b3ed080 000000010000000c 0000000000000000 [ 1069.755549] page dumped because: kasan: bad access detected [ 1069.761296] [ 1069.762934] Memory state around the buggy address: [ 1069.767989] ffff88809b3ed280: fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc [ 1069.775369] ffff88809b3ed300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1069.782758] >ffff88809b3ed380: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc [ 1069.790154] ^ [ 1069.796407] ffff88809b3ed400: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 1069.803797] ffff88809b3ed480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1069.811169] ================================================================== [ 1069.818740] Disabling lock debugging due to kernel taint [ 1069.826369] Bluetooth: Invalid header checksum [ 1069.933509] Bluetooth: Invalid header checksum [ 1069.957618] Kernel panic - not syncing: panic_on_warn set ... [ 1069.957618] [ 1069.965178] CPU: 1 PID: 29580 Comm: syz-executor.2 Tainted: G B 4.19.114-syzkaller #0 [ 1069.974666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1069.984038] Call Trace: [ 1069.986699] dump_stack+0x188/0x20d [ 1069.990353] panic+0x26a/0x50e [ 1069.993600] ? __warn_printk+0xf3/0xf3 [ 1069.997538] ? preempt_schedule_common+0x4a/0xc0 [ 1070.002498] ? h5_rx_3wire_hdr+0x38c/0x3b0 [ 1070.006756] ? ___preempt_schedule+0x16/0x18 [ 1070.011188] ? trace_hardirqs_on+0x55/0x210 [ 1070.015538] ? h5_rx_3wire_hdr+0x38c/0x3b0 [ 1070.019804] kasan_end_report+0x43/0x49 [ 1070.024592] kasan_report.cold+0xa4/0x2b9 [ 1070.028779] h5_rx_3wire_hdr+0x38c/0x3b0 [ 1070.033594] ? __ldsem_down_read_nested+0xe2/0x720 [ 1070.038552] h5_recv+0x2d4/0x460 [ 1070.041970] ? h5_slip_one_byte+0x1c0/0x1c0 [ 1070.047409] ? __lock_is_held+0xad/0x140 [ 1070.051524] hci_uart_tty_receive+0x21d/0x520 [ 1070.056175] ? hci_uart_write_work+0x6f0/0x6f0 [ 1070.060860] tty_ioctl+0xe0a/0x1420 [ 1070.064550] ? tty_vhangup+0x30/0x30 [ 1070.068297] ? mark_held_locks+0xf0/0xf0 [ 1070.073321] ? mark_held_locks+0xf0/0xf0 [ 1070.077532] ? tty_vhangup+0x30/0x30 [ 1070.082068] do_vfs_ioctl+0xcda/0x12e0 [ 1070.086696] ? selinux_file_ioctl+0x46c/0x5d0 [ 1070.091587] ? selinux_file_ioctl+0x125/0x5d0 [ 1070.096115] ? check_preemption_disabled+0x41/0x280 [ 1070.101362] ? ioctl_preallocate+0x200/0x200 [ 1070.105910] ? selinux_file_mprotect+0x600/0x600 [ 1070.110793] ? __fget+0x340/0x510 [ 1070.114286] ? iterate_fd+0x350/0x350 [ 1070.119363] ? check_preemption_disabled+0x41/0x280 [ 1070.124435] ? security_file_ioctl+0x6c/0xb0 [ 1070.128875] ksys_ioctl+0x9b/0xc0 [ 1070.132385] __x64_sys_ioctl+0x6f/0xb0 [ 1070.136296] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 1070.140899] do_syscall_64+0xf9/0x620 [ 1070.144733] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1070.149961] RIP: 0033:0x45c889 [ 1070.153270] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1070.172290] RSP: 002b:00007f98896e3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1070.180276] RAX: ffffffffffffffda RBX: 00007f98896e46d4 RCX: 000000000045c889 [ 1070.187572] RDX: 0000000020000080 RSI: 0000000000005412 RDI: 0000000000000003 [ 1070.196010] RBP: 000000000076bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1070.203407] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1070.211048] R13: 0000000000000582 R14: 00000000004c81b7 R15: 000000000076bfac [ 1070.219740] Kernel Offset: disabled [ 1070.223385] Rebooting in 86400 seconds..