Warning: Permanently added '10.128.1.80' (ECDSA) to the list of known hosts. 2021/05/23 23:17:04 fuzzer started 2021/05/23 23:17:04 dialing manager at 10.128.0.163:35677 2021/05/23 23:17:05 syscalls: 1997 2021/05/23 23:17:05 code coverage: enabled 2021/05/23 23:17:05 comparison tracing: enabled 2021/05/23 23:17:05 extra coverage: enabled 2021/05/23 23:17:05 setuid sandbox: enabled 2021/05/23 23:17:05 namespace sandbox: enabled 2021/05/23 23:17:05 Android sandbox: enabled 2021/05/23 23:17:05 fault injection: enabled 2021/05/23 23:17:05 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2021/05/23 23:17:05 net packet injection: /dev/net/tun does not exist 2021/05/23 23:17:05 net device setup: enabled 2021/05/23 23:17:05 concurrency sanitizer: enabled 2021/05/23 23:17:05 devlink PCI setup: PCI device 0000:00:10.0 is not available 2021/05/23 23:17:05 USB emulation: /dev/raw-gadget does not exist 2021/05/23 23:17:05 hci packet injection: /dev/vhci does not exist 2021/05/23 23:17:05 wifi device emulation: /sys/class/mac80211_hwsim/ does not exist 2021/05/23 23:17:05 802.15.4 emulation: /sys/bus/platform/devices/mac802154_hwsim does not exist 2021/05/23 23:17:05 suppressing KCSAN reports in functions: 'copy_process' 'ext4_writepages' '__xa_clear_mark' 'do_readlinkat' 'blk_mq_sched_dispatch_requests' '_find_next_bit' 2021/05/23 23:17:05 fetching corpus: 0, signal 0/2000 (executing program) 2021/05/23 23:17:05 fetching corpus: 49, signal 19016/22220 (executing program) 2021/05/23 23:17:05 fetching corpus: 99, signal 28668/32921 (executing program) 2021/05/23 23:17:05 fetching corpus: 149, signal 35111/40215 (executing program) 2021/05/23 23:17:05 fetching corpus: 199, signal 42278/47853 (executing program) 2021/05/23 23:17:05 fetching corpus: 249, signal 44935/51315 (executing program) 2021/05/23 23:17:05 fetching corpus: 299, signal 49337/56087 (executing program) 2021/05/23 23:17:05 fetching corpus: 349, signal 52962/60104 (executing program) 2021/05/23 23:17:06 fetching corpus: 399, signal 56416/63708 (executing program) 2021/05/23 23:17:06 fetching corpus: 449, signal 59287/66758 (executing program) 2021/05/23 23:17:06 fetching corpus: 499, signal 61831/69444 (executing program) 2021/05/23 23:17:06 fetching corpus: 549, signal 64566/72232 (executing program) 2021/05/23 23:17:06 fetching corpus: 599, signal 68665/75813 (executing program) 2021/05/23 23:17:06 fetching corpus: 649, signal 71195/78160 (executing program) 2021/05/23 23:17:06 fetching corpus: 699, signal 73352/80084 (executing program) 2021/05/23 23:17:06 fetching corpus: 749, signal 74726/81427 (executing program) 2021/05/23 23:17:06 fetching corpus: 799, signal 77014/83316 (executing program) 2021/05/23 23:17:06 fetching corpus: 849, signal 78961/84940 (executing program) 2021/05/23 23:17:06 fetching corpus: 899, signal 81748/86900 (executing program) 2021/05/23 23:17:06 fetching corpus: 949, signal 83695/88277 (executing program) [ 19.919903][ T1771] ================================================================== [ 19.921282][ T1771] BUG: KCSAN: data-race in complete_signal / futex_wait_queue_me [ 19.922530][ T1771] [ 19.922961][ T1771] write to 0xffff88810682a0ac of 4 bytes by task 1780 on cpu 0: [ 19.924196][ T1771] futex_wait_queue_me+0x198/0x260 [ 19.924889][ T1771] futex_wait+0x143/0x430 [ 19.925540][ T1771] do_futex+0x9d8/0x1ee0 [ 19.926201][ T1771] __se_sys_futex+0x21c/0x380 [ 19.926855][ T1771] __x64_sys_futex+0x74/0x80 [ 19.927547][ T1771] do_syscall_64+0x4a/0x90 [ 19.928504][ T1771] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 19.929338][ T1771] [ 19.929685][ T1771] read to 0xffff88810682a0ac of 4 bytes by task 1771 on cpu 1: [ 19.930743][ T1771] complete_signal+0x7c/0x600 [ 19.931393][ T1771] __send_signal+0x680/0x760 [ 19.932071][ T1771] send_signal+0x281/0x390 [ 19.932775][ T1771] do_send_specific+0x13d/0x1c0 [ 19.933555][ T1771] __x64_sys_tgkill+0x108/0x140 [ 19.934224][ T1771] do_syscall_64+0x4a/0x90 [ 19.934904][ T1771] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 19.935786][ T1771] [ 19.936323][ T1771] Reported by Kernel Concurrency Sanitizer on: [ 19.937251][ T1771] CPU: 1 PID: 1771 Comm: syz-fuzzer Not tainted 5.13.0-rc2-syzkaller #0 [ 19.938647][ T1771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 19.941373][ T1771] ================================================================== 2021/05/23 23:17:06 fetching corpus: 999, signal 84784/89090 (executing program) 2021/05/23 23:17:06 fetching corpus: 1049, signal 86671/90343 (executing program) 2021/05/23 23:17:06 fetching corpus: 1099, signal 87503/90929 (executing program) 2021/05/23 23:17:06 fetching corpus: 1149, signal 88896/91765 (executing program) 2021/05/23 23:17:06 fetching corpus: 1199, signal 90353/92584 (executing program) 2021/05/23 23:17:06 fetching corpus: 1249, signal 91738/93331 (executing program) 2021/05/23 23:17:06 fetching corpus: 1299, signal 93521/94161 (executing program) 2021/05/23 23:17:06 fetching corpus: 1310, signal 93758/94269 (executing program) 2021/05/23 23:17:06 fetching corpus: 1310, signal 93758/94288 (executing program) 2021/05/23 23:17:06 fetching corpus: 1310, signal 93758/94302 (executing program) 2021/05/23 23:17:07 fetching corpus: 1310, signal 93758/94321 (executing program) 2021/05/23 23:17:07 fetching corpus: 1310, signal 93758/94338 (executing program) 2021/05/23 23:17:07 fetching corpus: 1310, signal 93758/94347 (executing program) 2021/05/23 23:17:07 fetching corpus: 1310, signal 93758/94369 (executing program) 2021/05/23 23:17:07 fetching corpus: 1310, signal 93758/94384 (executing program) 2021/05/23 23:17:07 fetching corpus: 1310, signal 93758/94402 (executing program) 2021/05/23 23:17:07 fetching corpus: 1310, signal 93758/94421 (executing program) 2021/05/23 23:17:07 fetching corpus: 1310, signal 93758/94438 (executing program) 2021/05/23 23:17:07 fetching corpus: 1311, signal 93767/94456 (executing program) 2021/05/23 23:17:07 fetching corpus: 1311, signal 93767/94472 (executing program) 2021/05/23 23:17:07 fetching corpus: 1311, signal 93767/94493 (executing program) 2021/05/23 23:17:07 fetching corpus: 1311, signal 93767/94502 (executing program) 2021/05/23 23:17:07 fetching corpus: 1311, signal 93767/94518 (executing program) 2021/05/23 23:17:07 fetching corpus: 1311, signal 93767/94534 (executing program) 2021/05/23 23:17:07 fetching corpus: 1311, signal 93767/94546 (executing program) 2021/05/23 23:17:07 fetching corpus: 1311, signal 93767/94556 (executing program) 2021/05/23 23:17:07 fetching corpus: 1311, signal 93767/94574 (executing program) 2021/05/23 23:17:07 fetching corpus: 1311, signal 93767/94579 (executing program) 2021/05/23 23:17:07 fetching corpus: 1311, signal 93767/94579 (executing program) 2021/05/23 23:17:08 starting 6 fuzzer processes 23:17:08 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000004c0)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x61, &(0x7f00000002c0)="f47970da7c2fd541e0656c5762306aa606a0c2a76e59b65fa78fb184da006cabbd58564cf09dcac54f6d212e05d23391ff083d38ff122a776e08af2025580c72249ad2f5366f60b87a982a8066b10f8b85b47e770f548fd2e3c6a8323152fbeebd"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:17:08 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = dup(r0) getsockopt$sock_buf(r1, 0x1, 0x1c, &(0x7f0000000300)=""/176, &(0x7f00000003c0)=0xb0) 23:17:08 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000200)={0x0, 0x2}) 23:17:08 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000002400)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000001900)=ANY=[@ANYBLOB="4801"], 0x148}}], 0x1, 0x20008005) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r1, &(0x7f0000002400)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000002d40)=ANY=[@ANYBLOB="4801"], 0x148}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000600)="d4", 0x1}], 0x1}}], 0x2, 0x20008005) sendmmsg$inet6(r0, &(0x7f00000015c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000480)="1a", 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(r1, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)="d0", 0x7ffd}], 0x1}}], 0x1, 0x0) 23:17:08 executing program 3: r0 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYRES16, @ANYBLOB="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"], 0x2}}, 0x0) write(r0, &(0x7f0000000240)="241400001a0025f00485bc04fef7001d0a0b49ff708800008003280008020480fe0000000000000036ede498534108e58342fa94a235a2a441f9", 0xfcae) 23:17:08 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0) fchown(r0, 0xee00, 0x0) [ 21.797620][ T25] audit: type=1400 audit(1621811828.463:8): avc: denied { execmem } for pid=1786 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 21.904878][ T1791] cgroup: Unknown subsys name 'perf_event' [ 21.910829][ T1792] cgroup: Unknown subsys name 'perf_event' [ 21.917157][ T1792] cgroup: Unknown subsys name 'net_cls' [ 21.920860][ T1791] cgroup: Unknown subsys name 'net_cls' [ 21.940548][ T1793] cgroup: Unknown subsys name 'perf_event' [ 21.946708][ T1793] cgroup: Unknown subsys name 'net_cls' [ 21.950883][ T1795] cgroup: Unknown subsys name 'perf_event' [ 21.956451][ T1796] cgroup: Unknown subsys name 'perf_event' [ 21.958126][ T1795] cgroup: Unknown subsys name 'net_cls' [ 21.965597][ T1796] cgroup: Unknown subsys name 'net_cls' [ 21.995722][ T1809] cgroup: Unknown subsys name 'perf_event' [ 22.010236][ T1809] cgroup: Unknown subsys name 'net_cls' 23:17:12 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0) fchown(r0, 0xee00, 0x0) 23:17:12 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000200)={0x0, 0x2}) 23:17:12 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000002400)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000001900)=ANY=[@ANYBLOB="4801"], 0x148}}], 0x1, 0x20008005) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r1, &(0x7f0000002400)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000002d40)=ANY=[@ANYBLOB="4801"], 0x148}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000600)="d4", 0x1}], 0x1}}], 0x2, 0x20008005) sendmmsg$inet6(r0, &(0x7f00000015c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000480)="1a", 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(r1, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)="d0", 0x7ffd}], 0x1}}], 0x1, 0x0) [ 25.787348][ T4499] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 25.795490][ T4499] netlink: 4548 bytes leftover after parsing attributes in process `syz-executor.3'. 23:17:12 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0) fchown(r0, 0xee00, 0x0) 23:17:12 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000200)={0x0, 0x2}) 23:17:12 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000002400)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000001900)=ANY=[@ANYBLOB="4801"], 0x148}}], 0x1, 0x20008005) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r1, &(0x7f0000002400)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000002d40)=ANY=[@ANYBLOB="4801"], 0x148}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000600)="d4", 0x1}], 0x1}}], 0x2, 0x20008005) sendmmsg$inet6(r0, &(0x7f00000015c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000480)="1a", 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(r1, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)="d0", 0x7ffd}], 0x1}}], 0x1, 0x0) [ 25.872570][ T4532] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 25.880705][ T4532] netlink: 4548 bytes leftover after parsing attributes in process `syz-executor.3'. 23:17:15 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000004c0)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x61, &(0x7f00000002c0)="f47970da7c2fd541e0656c5762306aa606a0c2a76e59b65fa78fb184da006cabbd58564cf09dcac54f6d212e05d23391ff083d38ff122a776e08af2025580c72249ad2f5366f60b87a982a8066b10f8b85b47e770f548fd2e3c6a8323152fbeebd"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:17:15 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = dup(r0) getsockopt$sock_buf(r1, 0x1, 0x1c, &(0x7f0000000300)=""/176, &(0x7f00000003c0)=0xb0) 23:17:15 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000002400)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000001900)=ANY=[@ANYBLOB="4801"], 0x148}}], 0x1, 0x20008005) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r1, &(0x7f0000002400)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000002d40)=ANY=[@ANYBLOB="4801"], 0x148}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000600)="d4", 0x1}], 0x1}}], 0x2, 0x20008005) sendmmsg$inet6(r0, &(0x7f00000015c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000480)="1a", 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(r1, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)="d0", 0x7ffd}], 0x1}}], 0x1, 0x0) 23:17:15 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0) fchown(r0, 0xee00, 0x0) 23:17:15 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000200)={0x0, 0x2}) 23:17:15 executing program 3: r0 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYRES16, @ANYBLOB="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"], 0x2}}, 0x0) write(r0, &(0x7f0000000240)="241400001a0025f00485bc04fef7001d0a0b49ff708800008003280008020480fe0000000000000036ede498534108e58342fa94a235a2a441f9", 0xfcae) 23:17:15 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = dup(r0) getsockopt$sock_buf(r1, 0x1, 0x1c, &(0x7f0000000300)=""/176, &(0x7f00000003c0)=0xb0) 23:17:15 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000002400)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000001900)=ANY=[@ANYBLOB="4801"], 0x148}}], 0x1, 0x20008005) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r1, &(0x7f0000002400)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000002d40)=ANY=[@ANYBLOB="4801"], 0x148}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000600)="d4", 0x1}], 0x1}}], 0x2, 0x20008005) sendmmsg$inet6(r0, &(0x7f00000015c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000480)="1a", 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(r1, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)="d0", 0x7ffd}], 0x1}}], 0x1, 0x0) 23:17:15 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000002400)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000001900)=ANY=[@ANYBLOB="4801"], 0x148}}], 0x1, 0x20008005) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r1, &(0x7f0000002400)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000002d40)=ANY=[@ANYBLOB="4801"], 0x148}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000600)="d4", 0x1}], 0x1}}], 0x2, 0x20008005) sendmmsg$inet6(r0, &(0x7f00000015c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000480)="1a", 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(r1, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)="d0", 0x7ffd}], 0x1}}], 0x1, 0x0) 23:17:15 executing program 4: r0 = epoll_create1(0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) poll(&(0x7f00000001c0)=[{r1}], 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xb0000004}) [ 28.957293][ T4566] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 28.965503][ T4566] netlink: 4548 bytes leftover after parsing attributes in process `syz-executor.3'. 23:17:15 executing program 3: r0 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYRES16, @ANYBLOB="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"], 0x2}}, 0x0) write(r0, &(0x7f0000000240)="241400001a0025f00485bc04fef7001d0a0b49ff708800008003280008020480fe0000000000000036ede498534108e58342fa94a235a2a441f9", 0xfcae) 23:17:15 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000002400)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000001900)=ANY=[@ANYBLOB="4801"], 0x148}}], 0x1, 0x20008005) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r1, &(0x7f0000002400)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000002d40)=ANY=[@ANYBLOB="4801"], 0x148}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000600)="d4", 0x1}], 0x1}}], 0x2, 0x20008005) sendmmsg$inet6(r0, &(0x7f00000015c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000480)="1a", 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(r1, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)="d0", 0x7ffd}], 0x1}}], 0x1, 0x0) [ 29.032900][ T25] audit: type=1400 audit(1621811835.694:9): avc: denied { block_suspend } for pid=4580 comm="syz-executor.4" capability=36 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [ 29.043811][ T4588] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 29.063717][ T4588] netlink: 4548 bytes leftover after parsing attributes in process `syz-executor.3'.