=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir374862090/syzkaller.5NWs5l/1081/file0" dev="sda1" ino=16024 res=1 20:25:30 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0x4b, 0x0) [ 1117.607125][T16817] device virt_wifi0 entered promiscuous mode 20:25:31 executing program 2: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x400000000000030, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r1, @ANYRESHEX=r0, @ANYRES64=r0, @ANYBLOB="49fa6aded28f4d4d9a070d1f716f1d4bf052b1334cd827421d2835bcee3996e89f45271cd668c36d4a4516f1dd63e574a40209aebca5681ac6631c6a0068b937cabf0b5b4405be414672a0d337d7e4e492df5ef67505c170f69c4cb1ae10ca20365af7c82c90f279a00f1dab043af2dd1f3c91cb3aafe220ad91a329324d1185b8f685065a03b5dbea7300f987b53778f988f4a9d0d2ce156038be1385e9ddd917fa", @ANYBLOB=',group_id=', @ANYRES16=r0]) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) statfs(&(0x7f00000001c0)='./file0\x00', 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x2) r4 = socket$inet6(0xa, 0x2, 0x0) dup3(r4, r0, 0x0) [ 1117.651449][T16817] device virt_wifi0 left promiscuous mode 20:25:31 executing program 5: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x141042, 0x8) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x82) sendfile(r1, r0, 0x0, 0xa198) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x400000000000030, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10) connect$inet(r5, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x400000000000030, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRESDEC=r5, @ANYRESHEX=r5, @ANYRES32=r0], 0x119) sendfile(r3, r2, 0x0, 0xa198) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x103000, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r7, 0x111, 0x1, 0x4, 0x4) 20:25:31 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x6, 0x0, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086201, &(0x7f0000000280)=0x5) ioctl$VIDIOC_G_JPEGCOMP(r3, 0x808c563d, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}, 0x1}, @in={0x2, 0x0, @empty}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}], 0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r4}) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x5c}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(0x0, 0x1, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r8 = socket$inet6(0xa, 0x80005, 0x0) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r8, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c) r9 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x0, 0x400400) r10 = gettid() syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') accept4$vsock_stream(r9, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @hyper}, 0x10, 0x80000) getgid() ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000240)) writev(r5, &(0x7f0000000080), 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) ioprio_get$pid(0x2, r10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000000000)) tkill(r10, 0x1004000000016) fgetxattr(r5, 0x0, 0x0, 0x0) close(r7) dup2(r9, r6) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0xbba}, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000007c0)={[{0x7, 0x3, 0x0, 0xe2fe, 0xffffffffffffff81, 0x4, 0x4, 0xffffffffffffb1b0, 0x10000, 0x0, 0x6, 0x2}, {0x1, 0x7, 0x8, 0x8, 0x0, 0x0, 0x8, 0xd3, 0x1, 0x0, 0x3f}, {0x10000, 0x3f, 0x2, 0xea7, 0x5, 0x20, 0x4, 0x1, 0x80000001, 0x0, 0x8245, 0x0, 0x2}]}) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) timer_delete(0x0) [ 1117.985911][T16833] fuse: Unknown parameter '000000000000000000040x0000000000000003' [ 1118.111247][ T28] audit: type=1804 audit(1590265531.430:618): pid=16837 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir374862090/syzkaller.5NWs5l/1081/file0" dev="sda1" ino=16024 res=1 [ 1118.179778][T16845] fuse: Unknown parameter '000000000000000000030x0000000000000004' 20:25:31 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0x4c, 0x0) [ 1118.263535][ T28] audit: type=1804 audit(1590265531.520:619): pid=16847 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir984313495/syzkaller.4Sv1HN/987/file0" dev="sda1" ino=16313 res=1 20:25:31 executing program 4: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x82) sendfile(r1, r0, 0x0, 0xa198) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000000)) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r3, r2, 0x0, 0xa198) 20:25:31 executing program 1: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000180)={&(0x7f0000000100)="7c004e0f7eb6f0ae50030f1c62c166400f3a0fab0a00000004dfc5c4027d3fe566470f113b660f2f785f670f2ba80e0000002599899999", 0x4, &(0x7f0000000140)="f2df590bc46125767452e7875c3051c4e1f810f9c4e2fd1c43c1c1e3ab6546d3c63e42e200c402a947cdc4a2399ae3", {[0x1]}}, &(0x7f0000000240)={&(0x7f00000001c0)="c4a10dd5961d000000c481235c1cb42667f20f12f5f3436f42a4c4017c5aff3c2ac44178511e400f13ae00000000c481fc510b", 0x0, 0x0}, 0x8, &(0x7f0000000280)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a5377986fc254ec2862883ce7257cd4f7ae2dcfdaef81c581d1b4223e49887ee68e87ed537d5b2e957e1fac165be3eb34c5174f6279277376cbe5d10966df793456b54921f664921e1615264cc762c189704152109b0dff9eb9ca92da732cc5b46ffffff7f025485dc560b67fa9950386e7d44374265b739aa0ef8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c091b75999c66551d206c48cab1b787530de3629da0b37b211578542ae70ac9e8c0dbe754a77abd06ce2420a"], 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) [ 1118.470348][ T28] audit: type=1804 audit(1590265531.520:620): pid=16847 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir984313495/syzkaller.4Sv1HN/987/file0" dev="sda1" ino=16313 res=1 [ 1118.553156][T16855] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 20:25:32 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0x4d, 0x0) [ 1118.731368][T16855] device macsec1 entered promiscuous mode [ 1118.742786][T16855] device virt_wifi0 entered promiscuous mode 20:25:32 executing program 2: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030d7cc30303030303034303030302c757365725f69643df3303c85511290aa657da8630005b42eff70338977b431a2008454199ffd0b50ef861bec86c928b78abb2918e509fcd6eeae2a6d50bbdf2c29625b119cd469d9e24b0aa437de825d3f708ae010", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000040), 0x2) statfs(&(0x7f00000001c0)='./file0\x00', 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000300)=@filter={'filter\x00', 0xe, 0x4, 0x4a0, 0xffffffff, 0x0, 0x300, 0x230, 0xffffffff, 0xffffffff, 0x3d0, 0x3d0, 0x3d0, 0xffffffff, 0x4, &(0x7f00000000c0), {[{{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@common=@rt={{0x138, 'rt\x00'}, {0x5, [0x4, 0x100], 0xff, 0x8, 0x6, [@initdev={0xfe, 0x88, [], 0x1, 0x0}, @mcast2, @mcast1, @dev={0xfe, 0x80, [], 0x41}, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1c}}, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x3f}}, @local, @private0={0xfc, 0x0, [], 0x1}, @remote, @remote, @loopback, @empty, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={[], [], @broadcast}, @local], 0xf}}, @common=@hl={{0x28, 'hl\x00'}, {0x2, 0x26}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@ipv6={@local, @empty, [0xffffff00, 0xffffffff, 0xff], [0xff000000, 0xff, 0xff], 'macvtap0\x00', 'wg2\x00', {0xff}, {0xff}, 0x73, 0x9, 0x6, 0x9}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@ipv6={@mcast1, @dev={0xfe, 0x80, [], 0xc}, [0xff000000, 0x0, 0xff000000, 0xffff00], [0xff, 0x0, 0xff000000, 0xffff00], 'geneve0\x00', 'bond_slave_0\x00', {0xff}, {}, 0x16, 0x91, 0x1}, 0x0, 0xa8, 0xd0}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x500) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r2, 0x4112, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x2) r5 = socket$inet6(0xa, 0x2, 0x0) dup3(r5, r0, 0x0) [ 1118.851549][T16855] device virt_wifi0 left promiscuous mode [ 1119.198409][T16871] fuse: Bad value for 'rootmode' 20:25:32 executing program 5: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1c5143, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x82) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000080)=0x4) sendfile(r1, r0, 0x0, 0xa198) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000001580)=ANY=[], 0x119) ioctl$SG_SET_DEBUG(r2, 0x227e, &(0x7f00000000c0)=0x1) sendfile(r3, r2, 0x0, 0xa198) 20:25:32 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0x4e, 0x0) 20:25:32 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x6, 0x0, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086201, &(0x7f0000000280)=0x5) ioctl$VIDIOC_G_JPEGCOMP(r3, 0x808c563d, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}, 0x1}, @in={0x2, 0x0, @empty}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}], 0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r4}) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x5c}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(0x0, 0x1, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r8 = socket$inet6(0xa, 0x80005, 0x0) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r8, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c) r9 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x0, 0x400400) r10 = gettid() syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') accept4$vsock_stream(r9, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @hyper}, 0x10, 0x80000) getgid() ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000240)) writev(r5, &(0x7f0000000080), 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) ioprio_get$pid(0x2, r10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000000000)) tkill(r10, 0x1004000000016) fgetxattr(r5, &(0x7f0000000840)=ANY=[], 0x0, 0x0) close(r7) dup2(r9, r6) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0xbba}, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000007c0)={[{0x7, 0x3, 0x0, 0xe2fe, 0xffffffffffffff81, 0x4, 0x4, 0xffffffffffffb1b0, 0x10000, 0x0, 0x6, 0x2}, {0x1, 0x7, 0x8, 0x8, 0x0, 0x0, 0x8, 0xd3, 0x1, 0x0, 0x3f}, {0x10000, 0x3f, 0x2, 0xea7, 0x5, 0x20, 0x4, 0x1, 0x80000001, 0x0, 0x8245, 0x0, 0x2}]}) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) timer_delete(0x0) [ 1119.548054][T16872] fuse: Bad value for 'rootmode' 20:25:32 executing program 4: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x2f) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x82) sendfile(r1, r0, 0x0, 0xa198) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r3 = dup2(r2, r2) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r3, 0xc0905664, &(0x7f0000000080)={0x0, 0x0, [], @bt={0x5, 0x2fc7, 0x2, 0x1, 0x4, 0x6, 0x10, 0x4}}) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r5, r4, 0x0, 0xa198) 20:25:32 executing program 1: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000180)={&(0x7f0000000100)="7c004e0f7eb6f0ae50030f1c62c166400f3a0fab0a00000004dfc5c4027d3fe566470f113b660f2f785f670f2ba80e0000002599899999", 0x4, &(0x7f0000000140)="f2df590bc46125767452e7875c3051c4e1f810f9c4e2fd1c43c1c1e3ab6546d3c63e42e200c402a947cdc4a2399ae3", {[0x1]}}, &(0x7f0000000240)={&(0x7f00000001c0)="c4a10dd5961d000000c481235c1cb42667f20f12f5f3436f42a4c4017c5aff3c2ac44178511e400f13ae00000000c481fc510b", 0x0, &(0x7f0000000200)="3e410f01d845894d07c461ff123bf0f69504000000c46331782f1ac44175facb460f6f14a9f0440fb32f450fe4167600"}, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a5377986fc254ec2862883ce7257cd4f7ae2dcfdaef81c581d1b4223e49887ee68e87ed537d5b2e957e1fac165be3eb34c5174f6279277376cbe5d10966df793456b54921f664921e1615264cc762c189704152109b0dff9eb9ca92da732cc5b46ffffff7f025485dc560b67fa9950386e7d44374265b739aa0ef8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c091b75999c66551d206c48cab1b787530de3629da0b37b211578542ae70ac9e8c0dbe754a77abd06ce2420a"], 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) 20:25:33 executing program 5: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x82) sendfile(r1, r0, 0x0, 0xa198) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000001580)=ANY=[], 0x119) setsockopt$inet6_dccp_buf(r2, 0x21, 0xd, &(0x7f0000000080)="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", 0xfb) sendfile(r3, r2, 0x0, 0xa198) 20:25:33 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0x4f, 0x0) [ 1119.809908][T16902] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 20:25:33 executing program 2: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) statfs(&(0x7f00000001c0)='./file0\x00', 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x2) sendfile(r2, r0, &(0x7f0000000040)=0x83ea, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) dup3(r3, r0, 0x0) 20:25:33 executing program 4: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x82) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x9, 0x3, 0x80, 0xc0, 0x0, 0x80000000, 0x802, 0xb, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x8000, 0x2fe, 0x8, 0x7, 0x3d, 0xa9cb, 0x7}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x9) sendfile(r1, r0, 0x0, 0xa198) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000240), &(0x7f0000000280)=0x8) write$tun(r2, &(0x7f0000000180)={@void, @val={0x5, 0x0, 0x0, 0x0, 0x7e}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x84, 0x0, @rand_addr=0x64010100, @local}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "f426e6", 0xf, '\a\x00['}, "8cbfc12a38282c27820000108600820e1106001100000000940a5a17e89fb5f1d3debc85444603f425067b1a0d79b038e608e22c40002b4e297d1138b27a369d0b112b33df4c366b67856c210a24c3df637303000000c2885da70000"}}}}, 0x8a) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r5, r4, 0x0, 0xa198) [ 1119.978930][T16902] device macsec1 entered promiscuous mode [ 1119.984999][T16902] device virt_wifi0 entered promiscuous mode [ 1120.177838][T16902] device virt_wifi0 left promiscuous mode 20:25:33 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0x50, 0x0) 20:25:34 executing program 5: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x82) sendfile(r1, r0, 0x0, 0xa198) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x100, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000001580)=ANY=[], 0x119) sendfile(r3, r2, 0x0, 0xa198) 20:25:34 executing program 1: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000180)={&(0x7f0000000100)="7c004e0f7eb6f0ae50030f1c62c166400f3a0fab0a00000004dfc5c4027d3fe566470f113b660f2f785f670f2ba80e0000002599899999", 0x4, &(0x7f0000000140)="f2df590bc46125767452e7875c3051c4e1f810f9c4e2fd1c43c1c1e3ab6546d3c63e42e200c402a947cdc4a2399ae3", {[0x1]}}, &(0x7f0000000240)={&(0x7f00000001c0)="c4a10dd5961d000000c481235c1cb42667f20f12f5f3436f42a4c4017c5aff3c2ac44178511e400f13ae00000000c481fc510b", 0x0, &(0x7f0000000200)="3e410f01d845894d07c461ff123bf0f69504000000c46331782f1ac44175facb460f6f14a9f0440fb32f450fe4167600"}, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a5377986fc254ec2862883ce7257cd4f7ae2dcfdaef81c581d1b4223e49887ee68e87ed537d5b2e957e1fac165be3eb34c5174f6279277376cbe5d10966df793456b54921f664921e1615264cc762c189704152109b0dff9eb9ca92da732cc5b46ffffff7f025485dc560b67fa9950386e7d44374265b739aa0ef8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c091b75999c66551d206c48cab1b787530de3629da0b37b211578542ae70ac9e8c0dbe754a77abd06ce2420a"], 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) 20:25:34 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x6, 0x0, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086201, &(0x7f0000000280)=0x5) ioctl$VIDIOC_G_JPEGCOMP(r3, 0x808c563d, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}, 0x1}, @in={0x2, 0x0, @empty}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}], 0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r4}) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x5c}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(0x0, 0x1, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r8 = socket$inet6(0xa, 0x80005, 0x0) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r8, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c) r9 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x0, 0x400400) r10 = gettid() syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') accept4$vsock_stream(r9, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @hyper}, 0x10, 0x80000) getgid() ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000240)) writev(r5, &(0x7f0000000080), 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) ioprio_get$pid(0x2, r10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000000000)) tkill(r10, 0x1004000000016) fgetxattr(r5, &(0x7f0000000840)=ANY=[], 0x0, 0x0) close(r7) dup2(r9, r6) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0xbba}, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000007c0)={[{0x7, 0x3, 0x0, 0xe2fe, 0xffffffffffffff81, 0x4, 0x4, 0xffffffffffffb1b0, 0x10000, 0x0, 0x6, 0x2}, {0x1, 0x7, 0x8, 0x8, 0x0, 0x0, 0x8, 0xd3, 0x1, 0x0, 0x3f}, {0x10000, 0x3f, 0x2, 0xea7, 0x5, 0x20, 0x4, 0x1, 0x80000001, 0x0, 0x8245, 0x0, 0x2}]}) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) timer_delete(0x0) 20:25:34 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0x51, 0x0) [ 1120.906583][T16939] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 20:25:34 executing program 2: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000005c0)=0xc) syz_mount_image$hfs(&(0x7f0000000040)='hfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x4, &(0x7f0000000540)=[{&(0x7f0000000100)="288da446e9859a4d67d556b231d63c2fd64915b60fc1312b6cf82b18347c", 0x1e, 0x5}, {&(0x7f0000000300)="f4d9374bf0016a05a076464f5aa548a3b0e3bfed7cad416c6ca006d434b4e5220d8eab11f1026ca031c2858a8f38a015c8e81fc49136ed8ab090190b2676a27dd83f8173e701457cfd901e44c6166592f79020d569fc2df52e1e9765b656bfd66672df5e2f2371b78c83c78fc91ff585bcb79d4d3e6add33d115136a7bd13c1c79fddc0f2b030ad0641685994dd9b8da48413527bc90305544d199f208d73dc526efed0427ac0879c17b61372293f44e9c5d10eb2177487e1b72d46493bddc59f15d1147360e6d483e665eb2d04bf5e816cca6f68a408dcfba8e943e", 0xdc, 0xffffffffffff9978}, {&(0x7f00000006c0)="6c6325969c38cf9aa4b98cbd630a9fac7a381d1e2eb95bc4e423aa730667567e4395d1420887e61109e980ba14e1d56a2f68c8448cd56ae0570ff900ab54241428d86be01c2f0b8dd2bf51dc692d473761bb0c77270a44078869b730278544bdc2e68e91f471a1b8e7446aa6a671dbbf6d7eaa23e396f2a062d0c49e1696567c9c3a156295bd3612a266f5aa78af7f13a64c506cce4fc0b3cfd32ce2d80ba86ffa73e8e405997d2dda0f56d76e4294d80fafc074f908503e77cc2d34d6e0a56f65889bee98be19c69559ff137e0f5ba717556c5b823dd9b4be92692ef4868b5e9a48cf97a29730960dc507d43124c6f3d26eec2bd631a02044b533a45249a843a7c1df756150ad6b55cdb1ac25dd9c3053fcbd4ab3dcebb0f1a0bdf52287533d09912eace7bdbc34419a43608a8e44155309e8bb7b496bd55672bc538e55861c636e231effb4e463851265f5d07c78f61fb9f2ac81f3fe26a797a707fb913466a6e16350e3ef743a916f04416b4af9d3aa23e027aeb90ae2", 0x178, 0x1}, {&(0x7f0000000400)="7033fc07794b77017dae8c29b0dcc280894d220427d81312428d21fc9c98bb6fdfb58343f84677273affc1ca9661246f5a89bffa1f5567888523b4a3e9e15663fd18ac9663a1505f705bf462a39d7dc1d091c4c998c091577ed63bd73aad8e6a69ca3eb6a9ea49fd57399824ea", 0x6d, 0x1}], 0x80000, &(0x7f0000000600)=ANY=[@ANYBLOB="747970653d7a4097492c6769653d", @ANYRESHEX=r0, @ANYBLOB="2c747970653d271f73272c636f6465706167653d63703935302c747970653db3d6af5c2c6469725f756d61736b3d30303030303030303030303030303030303030313030302c63726561746f723d8f5ba8102c00"]) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000480)={0xfff, 0x7, 0x6, 0x80000000, 0x24b2}, 0x14) r5 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) statfs(&(0x7f00000001c0)='./file0\x00', 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x2) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000680)={0x6, 'ip6erspan0\x00', {0x1}, 0x1}) r6 = socket$inet6(0xa, 0x2, 0x0) dup3(r6, r1, 0x0) socket$packet(0x11, 0x2, 0x300) [ 1121.027927][T16939] device macsec1 entered promiscuous mode [ 1121.038492][T16939] device virt_wifi0 entered promiscuous mode [ 1121.070633][T16939] device virt_wifi0 left promiscuous mode 20:25:34 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0x52, 0x0) 20:25:35 executing program 4: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0xd7087e839808983, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x82) sendfile(r1, r0, 0x0, 0xa198) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'tgr160-generic\x00'}, 0x58) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r3, r2, 0x0, 0xa198) [ 1121.746843][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 1121.746863][ T28] audit: type=1804 audit(1590265535.060:648): pid=16973 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir984313495/syzkaller.4Sv1HN/990/file0" dev="sda1" ino=15854 res=1 20:25:35 executing program 1: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000180)={&(0x7f0000000100)="7c004e0f7eb6f0ae50030f1c62c166400f3a0fab0a00000004dfc5c4027d3fe566470f113b660f2f785f670f2ba80e0000002599899999", 0x4, &(0x7f0000000140)="f2df590bc46125767452e7875c3051c4e1f810f9c4e2fd1c43c1c1e3ab6546d3c63e42e200c402a947cdc4a2399ae3", {[0x1]}}, &(0x7f0000000240)={&(0x7f00000001c0)="c4a10dd5961d000000c481235c1cb42667f20f12f5f3436f42a4c4017c5aff3c2ac44178511e400f13ae00000000c481fc510b", 0x0, &(0x7f0000000200)="3e410f01d845894d07c461ff123bf0f69504000000c46331782f1ac44175facb460f6f14a9f0440fb32f450fe4167600"}, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a5377986fc254ec2862883ce7257cd4f7ae2dcfdaef81c581d1b4223e49887ee68e87ed537d5b2e957e1fac165be3eb34c5174f6279277376cbe5d10966df793456b54921f664921e1615264cc762c189704152109b0dff9eb9ca92da732cc5b46ffffff7f025485dc560b67fa9950386e7d44374265b739aa0ef8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c091b75999c66551d206c48cab1b787530de3629da0b37b211578542ae70ac9e8c0dbe754a77abd06ce2420a"], 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) [ 1121.806525][ T28] audit: type=1804 audit(1590265535.070:649): pid=16973 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir984313495/syzkaller.4Sv1HN/990/file0" dev="sda1" ino=15854 res=1 [ 1121.860429][T16979] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 20:25:35 executing program 5: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x82) sendfile(r1, r0, 0x0, 0xa198) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x80, 0x148) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000001580)=ANY=[], 0x119) sendfile(r3, r2, 0x0, 0xa198) [ 1121.912669][T16979] device macsec1 entered promiscuous mode [ 1121.920042][T16979] device virt_wifi0 entered promiscuous mode [ 1121.944717][ T28] audit: type=1804 audit(1590265535.260:650): pid=16980 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir374862090/syzkaller.5NWs5l/1085/file0" dev="sda1" ino=16032 res=1 [ 1121.976954][T16979] device virt_wifi0 left promiscuous mode 20:25:35 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x6, 0x0, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086201, &(0x7f0000000280)=0x5) ioctl$VIDIOC_G_JPEGCOMP(r3, 0x808c563d, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}, 0x1}, @in={0x2, 0x0, @empty}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}], 0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r4}) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x5c}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(0x0, 0x1, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r8 = socket$inet6(0xa, 0x80005, 0x0) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r8, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c) r9 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x0, 0x400400) r10 = gettid() syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') accept4$vsock_stream(r9, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @hyper}, 0x10, 0x80000) getgid() ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000240)) writev(r5, &(0x7f0000000080), 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) ioprio_get$pid(0x2, r10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000000000)) tkill(r10, 0x1004000000016) fgetxattr(r5, &(0x7f0000000840)=ANY=[], 0x0, 0x0) close(r7) dup2(r9, r6) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0xbba}, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000007c0)={[{0x7, 0x3, 0x0, 0xe2fe, 0xffffffffffffff81, 0x4, 0x4, 0xffffffffffffb1b0, 0x10000, 0x0, 0x6, 0x2}, {0x1, 0x7, 0x8, 0x8, 0x0, 0x0, 0x8, 0xd3, 0x1, 0x0, 0x3f}, {0x10000, 0x3f, 0x2, 0xea7, 0x5, 0x20, 0x4, 0x1, 0x80000001, 0x0, 0x8245, 0x0, 0x2}]}) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) timer_delete(0x0) 20:25:35 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0x53, 0x0) [ 1122.042690][ T28] audit: type=1804 audit(1590265535.260:651): pid=16980 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir374862090/syzkaller.5NWs5l/1085/file0" dev="sda1" ino=16032 res=1 20:25:35 executing program 4: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x82) sendfile(r1, r0, 0x0, 0xa198) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0xfffffffffffffffa) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r3, r2, 0x0, 0xa198) [ 1122.123543][ T28] audit: type=1804 audit(1590265535.290:652): pid=16980 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir374862090/syzkaller.5NWs5l/1085/file0" dev="sda1" ino=16032 res=1 20:25:35 executing program 2: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES64=r0, @ANYBLOB="2c726f6f746d6f64653c303030303030303030303030303034303030c3e14e7bad1346b3643db625933510fceb36d0736a1fe07c4fa8ac1813ed41b07f40aa29a1f0f14594018f18e9b3f4ad0396d27a09b20f8fbb40d847a38f82641d1d0bedc2d98ac3e8aad2b53033fba9ddbf86f20de945efd2ef75c6b8613dc811", @ANYBLOB="a44bf95568c54bbc53e5d9e94c944cfa8dd25a9084de67b1ac01b964127585ed64c24accc897c483a3b7443a21c8e78aa75c2b7ea15540bea174dcd813aba640516ebe48069d76ec9fd2f305469b01ff2fc28b2551f1f405cb538221c6f5880888508d90ab3eea9f83b171bd370a4bfd37ce8842ed416e09ce1a00"/134, @ANYBLOB=',group_id=', @ANYRESHEX]) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r6 = dup2(r5, r5) ioctl$EVIOCGPROP(r6, 0xc004743e, &(0x7f0000000000)=""/246) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f0000000040)='/dev/fuse\x00', &(0x7f00000000c0)='./file0\x00', r6) openat$userio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/userio\x00', 0x401, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000080)={r7}, &(0x7f00000000c0)=0xfe42) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000440)={r7, 0x1eb6, 0x7}, &(0x7f0000000480)=0x8) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) statfs(&(0x7f00000001c0)='./file0\x00', 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) dup3(r8, r0, 0x0) [ 1122.342028][ T28] audit: type=1804 audit(1590265535.320:653): pid=16980 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir374862090/syzkaller.5NWs5l/1085/file0" dev="sda1" ino=16032 res=1 [ 1122.620477][ T28] audit: type=1804 audit(1590265535.320:654): pid=16986 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir374862090/syzkaller.5NWs5l/1085/file0" dev="sda1" ino=16032 res=1 20:25:36 executing program 1: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000180)={&(0x7f0000000100)="7c004e0f7eb6f0ae50030f1c62c166400f3a0fab0a00000004dfc5c4027d3fe566470f113b660f2f785f670f2ba80e0000002599899999", 0x4, &(0x7f0000000140)="f2df590bc46125767452e7875c3051c4e1f810f9c4e2fd1c43c1c1e3ab6546d3c63e42e200c402a947cdc4a2399ae3", {[0x1]}}, &(0x7f0000000240)={&(0x7f00000001c0)="c4a10dd5961d000000c481235c1cb42667f20f12f5f3436f42a4c4017c5aff3c2ac44178511e400f13ae00000000c481fc510b", 0x0, &(0x7f0000000200)="3e410f01d845894d07c461ff123bf0f69504000000c46331782f1ac44175facb460f6f14a9f0440fb32f450fe4167600"}, 0x8, &(0x7f0000000280)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a5377986fc254ec2862883ce7257cd4f7ae2dcfdaef81c581d1b4223e49887ee68e87ed537d5b2e957e1fac165be3eb34c5174f6279277376cbe5d10966df793456b54921f664921e1615264cc762c189704152109b0dff9eb9ca92da732cc5b46ffffff7f025485dc560b67fa9950386e7d44374265b739aa0ef8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c091b75999c66551d206c48cab1b787530de3629da0b37b211578542ae70ac9e8c0dbe754a77abd06ce2420a"], 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) 20:25:36 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0x54, 0x0) [ 1122.727709][ T28] audit: type=1804 audit(1590265535.320:655): pid=16987 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir374862090/syzkaller.5NWs5l/1085/file0" dev="sda1" ino=16032 res=1 [ 1122.797156][ T28] audit: type=1804 audit(1590265535.490:656): pid=16991 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir984313495/syzkaller.4Sv1HN/991/file0" dev="sda1" ino=16029 res=1 [ 1122.896225][ T28] audit: type=1804 audit(1590265535.510:657): pid=16991 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir984313495/syzkaller.4Sv1HN/991/file0" dev="sda1" ino=16029 res=1 20:25:36 executing program 5: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) ioctl$HIDIOCGRDESC(r0, 0x90044802, &(0x7f0000000200)={0x9bb, "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"}) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x82) sendfile(r1, r0, 0x0, 0xa198) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000001580)=ANY=[], 0x119) sendfile(r3, r2, 0x0, 0xa198) 20:25:36 executing program 2: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) statfs(&(0x7f00000001c0)='./file0\x00', 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x2) r3 = socket$inet6(0xa, 0x2, 0x0) dup3(r3, r0, 0x0) [ 1122.998706][T17022] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 1123.094001][T17022] device macsec1 entered promiscuous mode [ 1123.124500][T17022] device virt_wifi0 entered promiscuous mode 20:25:36 executing program 4: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x40143, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x82) sendfile(r1, r0, 0x0, 0xa198) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r3, r2, 0x0, 0xa198) [ 1123.155793][T17022] device virt_wifi0 left promiscuous mode 20:25:36 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0x55, 0x0) 20:25:36 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x6, 0x0, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086201, &(0x7f0000000280)=0x5) ioctl$VIDIOC_G_JPEGCOMP(r3, 0x808c563d, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}, 0x1}, @in={0x2, 0x0, @empty}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}], 0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r4}) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x5c}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(0x0, 0x1, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r8 = socket$inet6(0xa, 0x80005, 0x0) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r8, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c) r9 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x0, 0x400400) r10 = gettid() syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') accept4$vsock_stream(r9, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @hyper}, 0x10, 0x80000) getgid() ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000240)) writev(r5, &(0x7f0000000080), 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) ioprio_get$pid(0x2, r10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000000000)) tkill(r10, 0x1004000000016) fgetxattr(r5, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x0, 0x0) close(r7) dup2(r9, r6) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0xbba}, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000007c0)={[{0x7, 0x3, 0x0, 0xe2fe, 0xffffffffffffff81, 0x4, 0x4, 0xffffffffffffb1b0, 0x10000, 0x0, 0x6, 0x2}, {0x1, 0x7, 0x8, 0x8, 0x0, 0x0, 0x8, 0xd3, 0x1, 0x0, 0x3f}, {0x10000, 0x3f, 0x2, 0xea7, 0x5, 0x20, 0x4, 0x1, 0x80000001, 0x0, 0x8245, 0x0, 0x2}]}) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) timer_delete(0x0) 20:25:37 executing program 4: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x82) r2 = gettid() r3 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r2) write$binfmt_script(r3, &(0x7f0000000140)=ANY=[], 0x7f) close(r3) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0xfff, 0x0, 0x0, 0x7fffffff, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000000000)={'ipvlan0\x00', {0x2, 0x4e24, @multicast2}}) fcntl$setstatus(r4, 0x4, 0x2000) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) sendfile(r1, r0, 0x0, 0xa198) open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r6 = dup2(r5, r5) ioctl$EVIOCGPROP(r6, 0xc004743e, &(0x7f0000000000)=""/246) 20:25:37 executing program 1: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000180)={&(0x7f0000000100)="7c004e0f7eb6f0ae50030f1c62c166400f3a0fab0a00000004dfc5c4027d3fe566470f113b660f2f785f670f2ba80e0000002599899999", 0x4, &(0x7f0000000140)="f2df590bc46125767452e7875c3051c4e1f810f9c4e2fd1c43c1c1e3ab6546d3c63e42e200c402a947cdc4a2399ae3", {[0x1]}}, &(0x7f0000000240)={&(0x7f00000001c0)="c4a10dd5961d000000c481235c1cb42667f20f12f5f3436f42a4c4017c5aff3c2ac44178511e400f13ae00000000c481fc510b", 0x0, &(0x7f0000000200)="3e410f01d845894d07c461ff123bf0f69504000000c46331782f1ac44175facb460f6f14a9f0440fb32f450fe4167600"}, 0x8, &(0x7f0000000280)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a5377986fc254ec2862883ce7257cd4f7ae2dcfdaef81c581d1b4223e49887ee68e87ed537d5b2e957e1fac165be3eb34c5174f6279277376cbe5d10966df793456b54921f664921e1615264cc762c189704152109b0dff9eb9ca92da732cc5b46ffffff7f025485dc560b67fa9950386e7d44374265b739aa0ef8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c091b75999c66551d206c48cab1b787530de3629da0b37b211578542ae70ac9e8c0dbe754a77abd06ce2420a"], 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) 20:25:37 executing program 4: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x82) sendfile(r1, r0, 0x0, 0xa198) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r3, r2, 0x0, 0xa198) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r5 = dup2(r4, r4) ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f0000000000)=""/246) recvmsg$kcm(r5, &(0x7f0000000140)={&(0x7f0000002540)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000001400)=[{&(0x7f0000000200)=""/216, 0xd8}, {&(0x7f00000024c0)=""/115, 0x73}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/224, 0xe0}, {&(0x7f000001b540)=""/102389}, {&(0x7f0000000180)=""/55, 0x37}], 0x1000000000000092, &(0x7f0000001480)=""/4096, 0x1000}, 0x44) 20:25:37 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0x56, 0x0) 20:25:37 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0x57, 0x0) [ 1124.069442][T17064] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 20:25:37 executing program 2: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f69643dc73f903e94f17149696d24e5f05603df304497aee1701a311824423a26d8d68fc3129f36d07b03456f79f70a8ba0d3ffaac378e41e7c06fada44f0cca789fd0e1aaf4e61479abb490adf5426f04c82b75d878b631ced12da5ae5fd4d9676a6681de49e996b822313fda8a515bb4df1a9293d0c17", @ANYRESDEC=0x0]) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) statfs(&(0x7f00000001c0)='./file0\x00', 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x2) r3 = socket$inet6(0xa, 0x2, 0x0) dup3(r3, r0, 0x0) [ 1124.209180][T17064] device macsec1 entered promiscuous mode [ 1124.232935][T17064] device virt_wifi0 entered promiscuous mode [ 1124.267388][T17078] fuse: Bad value for 'group_id' [ 1124.312268][T17064] device virt_wifi0 left promiscuous mode 20:25:37 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0x58, 0x0) 20:25:37 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x6, 0x0, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086201, &(0x7f0000000280)=0x5) ioctl$VIDIOC_G_JPEGCOMP(r3, 0x808c563d, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}, 0x1}, @in={0x2, 0x0, @empty}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}], 0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r4}) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x5c}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(0x0, 0x1, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r8 = socket$inet6(0xa, 0x80005, 0x0) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r8, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c) r9 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x0, 0x400400) r10 = gettid() syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') accept4$vsock_stream(r9, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @hyper}, 0x10, 0x80000) getgid() ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000240)) writev(r5, &(0x7f0000000080), 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) ioprio_get$pid(0x2, r10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000000000)) tkill(r10, 0x1004000000016) fgetxattr(r5, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x0, 0x0) close(r7) dup2(r9, r6) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0xbba}, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000007c0)={[{0x7, 0x3, 0x0, 0xe2fe, 0xffffffffffffff81, 0x4, 0x4, 0xffffffffffffb1b0, 0x10000, 0x0, 0x6, 0x2}, {0x1, 0x7, 0x8, 0x8, 0x0, 0x0, 0x8, 0xd3, 0x1, 0x0, 0x3f}, {0x10000, 0x3f, 0x2, 0xea7, 0x5, 0x20, 0x4, 0x1, 0x80000001, 0x0, 0x8245, 0x0, 0x2}]}) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) timer_delete(0x0) 20:25:38 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0x59, 0x0) [ 1124.857154][T17079] fuse: Bad value for 'group_id' 20:25:38 executing program 1: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000180)={&(0x7f0000000100)="7c004e0f7eb6f0ae50030f1c62c166400f3a0fab0a00000004dfc5c4027d3fe566470f113b660f2f785f670f2ba80e0000002599899999", 0x4, &(0x7f0000000140)="f2df590bc46125767452e7875c3051c4e1f810f9c4e2fd1c43c1c1e3ab6546d3c63e42e200c402a947cdc4a2399ae3", {[0x1]}}, &(0x7f0000000240)={&(0x7f00000001c0)="c4a10dd5961d000000c481235c1cb42667f20f12f5f3436f42a4c4017c5aff3c2ac44178511e400f13ae00000000c481fc510b", 0x0, &(0x7f0000000200)="3e410f01d845894d07c461ff123bf0f69504000000c46331782f1ac44175facb460f6f14a9f0440fb32f450fe4167600"}, 0x8, &(0x7f0000000280)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a5377986fc254ec2862883ce7257cd4f7ae2dcfdaef81c581d1b4223e49887ee68e87ed537d5b2e957e1fac165be3eb34c5174f6279277376cbe5d10966df793456b54921f664921e1615264cc762c189704152109b0dff9eb9ca92da732cc5b46ffffff7f025485dc560b67fa9950386e7d44374265b739aa0ef8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c091b75999c66551d206c48cab1b787530de3629da0b37b211578542ae70ac9e8c0dbe754a77abd06ce2420a"], 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) 20:25:38 executing program 2: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="4735b2917b01000000", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) statfs(&(0x7f00000001c0)='./file0\x00', 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x2) r3 = socket$inet6(0xa, 0x6, 0x0) dup3(r3, r0, 0x0) 20:25:38 executing program 5: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x82) sendfile(r1, r0, 0x0, 0xa198) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r5 = dup2(r4, r4) ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f0000000000)=""/246) sendmsg$NL80211_CMD_REQ_SET_REG(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_RULES={0x14, 0x22, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xa194}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000804}, 0x4000000) stat(&(0x7f0000000300)='./file0/file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000008c0)={{{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000240)=0xe8) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000840)={{0x0, r6, r7, r8, r7, 0x0, 0xb}, 0xb8fb, 0xffc, 0x3, 0x8000, 0x0, 0x0, 0x81}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r10) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x8060, &(0x7f0000000280)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@cachetag={'cachetag', 0x3d, '/dev/ppp\x00'}}, {@cachetag={'cachetag', 0x3d, 'eth0ppp0', r10}}, {@subj_role={'subj_role', 0x3d, '$)&cgroup#'}}, {@dont_appraise='dont_appraise'}]}}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000001580)=ANY=[], 0x119) sendfile(r3, r2, 0x0, 0xa198) 20:25:38 executing program 4: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x82) sendfile(r1, r0, 0x0, 0xa198) r2 = open(&(0x7f0000000080)='./file0\x00', 0x400000, 0x20) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r3, r2, 0x0, 0xa198) [ 1125.105634][T17107] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 20:25:38 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0x5a, 0x0) [ 1125.231304][T17107] device macsec1 entered promiscuous mode [ 1125.254446][T17107] device virt_wifi0 entered promiscuous mode [ 1125.261334][T17118] fuse: Unknown parameter 'G5²‘{' [ 1125.330270][T17107] device virt_wifi0 left promiscuous mode 20:25:39 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x6, 0x0, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086201, &(0x7f0000000280)=0x5) ioctl$VIDIOC_G_JPEGCOMP(r3, 0x808c563d, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}, 0x1}, @in={0x2, 0x0, @empty}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}], 0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r4}) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x5c}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(0x0, 0x1, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r8 = socket$inet6(0xa, 0x80005, 0x0) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r8, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c) r9 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x0, 0x400400) r10 = gettid() syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') accept4$vsock_stream(r9, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @hyper}, 0x10, 0x80000) getgid() ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000240)) writev(r5, &(0x7f0000000080), 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) ioprio_get$pid(0x2, r10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000000000)) tkill(r10, 0x1004000000016) fgetxattr(r5, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x0, 0x0) close(r7) dup2(r9, r6) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0xbba}, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000007c0)={[{0x7, 0x3, 0x0, 0xe2fe, 0xffffffffffffff81, 0x4, 0x4, 0xffffffffffffb1b0, 0x10000, 0x0, 0x6, 0x2}, {0x1, 0x7, 0x8, 0x8, 0x0, 0x0, 0x8, 0xd3, 0x1, 0x0, 0x3f}, {0x10000, 0x3f, 0x2, 0xea7, 0x5, 0x20, 0x4, 0x1, 0x80000001, 0x0, 0x8245, 0x0, 0x2}]}) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) timer_delete(0x0) 20:25:39 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0x5b, 0x0) [ 1125.951908][T17121] fuse: Unknown parameter 'G5²‘{' 20:25:39 executing program 5: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x82) sendfile(r1, r0, 0x0, 0xa198) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x90241, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000001580)=ANY=[], 0x119) sendfile(r3, r2, 0x0, 0xa198) 20:25:39 executing program 4: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x8bad1afe44632199, 0x58) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x82) sendfile(r1, r0, 0x0, 0xa198) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r3, r2, 0x0, 0xa198) 20:25:39 executing program 2: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) sendmsg$nl_netfilter(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)={0x2154, 0xc, 0x1, 0x401, 0x70bd27, 0x25dfdbfd, {0x1, 0x0, 0x5}, [@typed={0x4, 0x3c}, @generic="b0a42598abf041a6a59a550b439a09bd69234abd3fe942e2891325e5979a9368e19687346daa", @nested={0x47, 0x4f, 0x0, 0x1, [@generic="1d082584d448aef5293b20b97a488167b089bfcdb285ce48d2903bcfe9f38c49d5d37ef400040be751a7c7010852b8ba38aebdef65acbd2620c20bdd5c8d796ca1770d"]}, @typed={0x1004, 0x69, 0x0, 0x0, @binary="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"}, @generic="6a1f9702d529ff8bfc82fb713a436872914aefe7315fac1a3b31d3434fd0ea9713327944263e90d7ae87652ea19108bddd12cf2f8434431d983cf899bfed0cfa343b72a5802c73ad9cf78f086b79be6e5cec9df223c460eb587ba52daa3b53db27ed127f8b21f7c05657203161913c02b1d6a19759b078a9be5bc74568204847a14da6db894d04aa126cf4496bb5c33b348ef0566e6440f0366905ad8bd11836690fa93a3ef167871941fb914201976be3df1711e871c1", @nested={0xc, 0x89, 0x0, 0x1, [@typed={0x8, 0x24, 0x0, 0x0, @uid=0xee00}]}, @typed={0x1004, 0x2b, 0x0, 0x0, @binary="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"}]}, 0x2154}, 0x1, 0x0, 0x0, 0x40800}, 0x40) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) statfs(&(0x7f00000001c0)='./file0\x00', 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x2) r5 = socket$inet6(0xa, 0x2, 0x0) dup3(r5, r0, 0x0) 20:25:39 executing program 1: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000180)={&(0x7f0000000100)="7c004e0f7eb6f0ae50030f1c62c166400f3a0fab0a00000004dfc5c4027d3fe566470f113b660f2f785f670f2ba80e0000002599899999", 0x4, &(0x7f0000000140)="f2df590bc46125767452e7875c3051c4e1f810f9c4e2fd1c43c1c1e3ab6546d3c63e42e200c402a947cdc4a2399ae3", {[0x1]}}, &(0x7f0000000240)={&(0x7f00000001c0)="c4a10dd5961d000000c481235c1cb42667f20f12f5f3436f42a4c4017c5aff3c2ac44178511e400f13ae00000000c481fc510b", 0x0, &(0x7f0000000200)="3e410f01d845894d07c461ff123bf0f69504000000c46331782f1ac44175facb460f6f14a9f0440fb32f450fe4167600"}, 0x8, &(0x7f0000000280)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a5377986fc254ec2862883ce7257cd4f7ae2dcfdaef81c581d1b4223e49887ee68e87ed537d5b2e957e1fac165be3eb34c5174f6279277376cbe5d10966df793456b54921f664921e1615264cc762c189704152109b0dff9eb9ca92da732cc5b46ffffff7f025485dc560b67fa9950386e7d44374265b739aa0ef8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c091b75999c66551d206c48cab1b787530de3629da0b37b211578542ae70ac9e8c0dbe754a77abd06ce2420a"], 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) 20:25:39 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0x5c, 0x0) 20:25:39 executing program 4: open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[], 0x82) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x400000000000030, 0x0) sendfile(r1, r1, 0x0, 0xa198) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r3, r2, 0x0, 0xa198) 20:25:39 executing program 1: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000180)={&(0x7f0000000100)="7c004e0f7eb6f0ae50030f1c62c166400f3a0fab0a00000004dfc5c4027d3fe566470f113b660f2f785f670f2ba80e0000002599899999", 0x4, &(0x7f0000000140)="f2df590bc46125767452e7875c3051c4e1f810f9c4e2fd1c43c1c1e3ab6546d3c63e42e200c402a947cdc4a2399ae3", {[0x1]}}, &(0x7f0000000240)={&(0x7f00000001c0)="c4a10dd5961d000000c481235c1cb42667f20f12f5f3436f42a4c4017c5aff3c2ac44178511e400f13ae00000000c481fc510b", 0x0, &(0x7f0000000200)="3e410f01d845894d07c461ff123bf0f69504000000c46331782f1ac44175facb460f6f14a9f0440fb32f450fe4167600"}, 0x8, &(0x7f0000000280)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a5377986fc254ec2862883ce7257cd4f7ae2dcfdaef81c581d1b4223e49887ee68e87ed537d5b2e957e1fac165be3eb34c5174f6279277376cbe5d10966df793456b54921f664921e1615264cc762c189704152109b0dff9eb9ca92da732cc5b46ffffff7f025485dc560b67fa9950386e7d44374265b739aa0ef8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c091b75999c66551d206c48cab1b787530de3629da0b37b211578542ae70ac9e8c0dbe754a77abd06ce2420a"], 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) [ 1126.618131][T17166] fuse: Bad value for 'fd' 20:25:40 executing program 4: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x82) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x400000000000030, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0xc0406618, &(0x7f0000000000)={{0x0, 0x0, @reserved="f0d8ea3547017ac4cf07ec3514248068c78482a157233136bba25417cda8af03"}}) r3 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000200)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r4 = add_key$keyring(&(0x7f0000000980)='keyring\x00', &(0x7f0000000240)={'syz'}, 0x0, 0x0, r3) add_key(&(0x7f0000000940)='big_key\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000a00)="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", 0x36b, r4) keyctl$invalidate(0x15, r4) sendfile(r1, r0, 0x0, 0xa198) r5 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r6 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r6, r5, 0x0, 0xa198) 20:25:40 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0x5d, 0x0) 20:25:40 executing program 1: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000180)={&(0x7f0000000100)="7c004e0f7eb6f0ae50030f1c62c166400f3a0fab0a00000004dfc5c4027d3fe566470f113b660f2f785f670f2ba80e0000002599899999", 0x4, &(0x7f0000000140)="f2df590bc46125767452e7875c3051c4e1f810f9c4e2fd1c43c1c1e3ab6546d3c63e42e200c402a947cdc4a2399ae3", {[0x1]}}, &(0x7f0000000240)={&(0x7f00000001c0)="c4a10dd5961d000000c481235c1cb42667f20f12f5f3436f42a4c4017c5aff3c2ac44178511e400f13ae00000000c481fc510b", 0x0, &(0x7f0000000200)="3e410f01d845894d07c461ff123bf0f69504000000c46331782f1ac44175facb460f6f14a9f0440fb32f450fe4167600"}, 0x8, &(0x7f0000000280)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a5377986fc254ec2862883ce7257cd4f7ae2dcfdaef81c581d1b4223e49887ee68e87ed537d5b2e957e1fac165be3eb34c5174f6279277376cbe5d10966df793456b54921f664921e1615264cc762c189704152109b0dff9eb9ca92da732cc5b46ffffff7f025485dc560b67fa9950386e7d44374265b739aa0ef8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c091b75999c66551d206c48cab1b787530de3629da0b37b211578542ae70ac9e8c0dbe754a77abd06ce2420a"], 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) 20:25:40 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x6, 0x0, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086201, &(0x7f0000000280)=0x5) ioctl$VIDIOC_G_JPEGCOMP(r3, 0x808c563d, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}, 0x1}, @in={0x2, 0x0, @empty}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}], 0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r4}) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x5c}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(0x0, 0x1, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r8 = socket$inet6(0xa, 0x80005, 0x0) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r8, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c) r9 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x0, 0x400400) r10 = gettid() syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') accept4$vsock_stream(r9, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @hyper}, 0x10, 0x80000) getgid() ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000240)) writev(r5, &(0x7f0000000080), 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) ioprio_get$pid(0x2, r10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000000000)) tkill(r10, 0x1004000000016) fgetxattr(r5, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x0, 0x0) close(r7) dup2(r9, r6) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0xbba}, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000007c0)={[{0x7, 0x3, 0x0, 0xe2fe, 0xffffffffffffff81, 0x4, 0x4, 0xffffffffffffb1b0, 0x10000, 0x0, 0x6, 0x2}, {0x1, 0x7, 0x8, 0x8, 0x0, 0x0, 0x8, 0xd3, 0x1, 0x0, 0x3f}, {0x10000, 0x3f, 0x2, 0xea7, 0x5, 0x20, 0x4, 0x1, 0x80000001, 0x0, 0x8245, 0x0, 0x2}]}) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) timer_delete(0x0) 20:25:40 executing program 5: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x82) sendfile(r1, r0, 0x0, 0xa198) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x400000000000030, 0x0) getsockopt$sock_int(r2, 0x1, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r3 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000001580)=ANY=[], 0x119) sendfile(r4, r3, 0x0, 0xa198) ioctl$int_out(r0, 0x0, &(0x7f0000000000)) 20:25:40 executing program 1: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000180)={&(0x7f0000000100)="7c004e0f7eb6f0ae50030f1c62c166400f3a0fab0a00000004dfc5c4027d3fe566470f113b660f2f785f670f2ba80e0000002599899999", 0x4, &(0x7f0000000140)="f2df590bc46125767452e7875c3051c4e1f810f9c4e2fd1c43c1c1e3ab6546d3c63e42e200c402a947cdc4a2399ae3", {[0x1]}}, &(0x7f0000000240)={&(0x7f00000001c0)="c4a10dd5961d000000c481235c1cb42667f20f12f5f3436f42a4c4017c5aff3c2ac44178511e400f13ae00000000c481fc510b", 0x0, &(0x7f0000000200)="3e410f01d845894d07c461ff123bf0f69504000000c46331782f1ac44175facb460f6f14a9f0440fb32f450fe4167600"}, 0x8, &(0x7f0000000280)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) 20:25:40 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0x5e, 0x0) [ 1127.093898][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 1127.093919][ T28] audit: type=1804 audit(1590265540.411:687): pid=17189 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir374862090/syzkaller.5NWs5l/1093/file0" dev="sda1" ino=15944 res=1 [ 1127.182007][ T28] audit: type=1804 audit(1590265540.421:688): pid=17189 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir374862090/syzkaller.5NWs5l/1093/file0" dev="sda1" ino=15944 res=1 20:25:40 executing program 2: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000300)={0x1, 0xff, 0x40}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x800) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x400000000000030, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000280)={'syzkaller0\x00', &(0x7f00000000c0)=@ethtool_perm_addr={0x20, 0x3b, "45ad79f4dde0e5b68b4e0e69150b049fd62ec7c5a8b444d1a84b472a889426685ee704765a57ed04bc62ad9eaaa61033c65a511106d7d0f1ca8e6d"}}) statfs(&(0x7f00000001c0)='./file0\x00', 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) umount2(&(0x7f0000000080)='./file0\x00', 0x2) r5 = socket$inet6(0xa, 0x2, 0x0) dup3(r5, r0, 0x0) [ 1127.330117][ T28] audit: type=1804 audit(1590265540.651:689): pid=17202 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir984313495/syzkaller.4Sv1HN/995/file0" dev="sda1" ino=16028 res=1 20:25:40 executing program 1: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000180)={&(0x7f0000000100)="7c004e0f7eb6f0ae50030f1c62c166400f3a0fab0a00000004dfc5c4027d3fe566470f113b660f2f785f670f2ba80e0000002599899999", 0x4, &(0x7f0000000140)="f2df590bc46125767452e7875c3051c4e1f810f9c4e2fd1c43c1c1e3ab6546d3c63e42e200c402a947cdc4a2399ae3", {[0x1]}}, &(0x7f0000000240)={&(0x7f00000001c0)="c4a10dd5961d000000c481235c1cb42667f20f12f5f3436f42a4c4017c5aff3c2ac44178511e400f13ae00000000c481fc510b", 0x0, &(0x7f0000000200)="3e410f01d845894d07c461ff123bf0f69504000000c46331782f1ac44175facb460f6f14a9f0440fb32f450fe4167600"}, 0x8, &(0x7f0000000280)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) [ 1127.365195][ T28] audit: type=1804 audit(1590265540.661:690): pid=17202 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir984313495/syzkaller.4Sv1HN/995/file0" dev="sda1" ino=16028 res=1 20:25:41 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0x5f, 0x0) 20:25:41 executing program 1: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000180)={&(0x7f0000000100)="7c004e0f7eb6f0ae50030f1c62c166400f3a0fab0a00000004dfc5c4027d3fe566470f113b660f2f785f670f2ba80e0000002599899999", 0x4, &(0x7f0000000140)="f2df590bc46125767452e7875c3051c4e1f810f9c4e2fd1c43c1c1e3ab6546d3c63e42e200c402a947cdc4a2399ae3", {[0x1]}}, &(0x7f0000000240)={&(0x7f00000001c0)="c4a10dd5961d000000c481235c1cb42667f20f12f5f3436f42a4c4017c5aff3c2ac44178511e400f13ae00000000c481fc510b", 0x0, &(0x7f0000000200)="3e410f01d845894d07c461ff123bf0f69504000000c46331782f1ac44175facb460f6f14a9f0440fb32f450fe4167600"}, 0x8, &(0x7f0000000280)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) [ 1127.858294][ T28] audit: type=1804 audit(1590265541.181:691): pid=17189 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir374862090/syzkaller.5NWs5l/1093/file0" dev="sda1" ino=15944 res=1 20:25:41 executing program 4: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x4100, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x400000000000030, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x82) sendfile(r1, r0, 0x0, 0xa198) r3 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) socket$isdn_base(0x22, 0x3, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x3f, 0x20}, &(0x7f0000000140)=0xc) sendfile(r4, r3, 0x0, 0xa198) [ 1127.930179][ T28] audit: type=1804 audit(1590265541.181:692): pid=17219 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir374862090/syzkaller.5NWs5l/1093/file0" dev="sda1" ino=15944 res=1 20:25:41 executing program 2: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="66643dbb240b3ebc589b20cba04f1c3db3c3054a78e75852c3c4d13ade58e3d4a3b1ac41191076338f2616123bd95faa44407996492e6562d09d36d0efe524b7d4267bf5e97eabd1fbfca46eea2aa5c1eecb02f22bb58b6dbc28e1ac5e5a43a85cfaeb464485a5536e7cb01ef35c71455bdd5af4a370dc00b92292de61e7e94ffbf471c3892487bfce8df278defbaeeca92cbb1184e69a3d9db430fdd16dab1bcd40fc2fab9845e3d85fb03ba210463d8b0a18ddb6cc913a2c1594d1e97449ebdbf6ccaa1a", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) statfs(&(0x7f00000001c0)='./file0\x00', 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x2) r3 = socket$inet6(0xa, 0x2, 0x0) dup3(r3, r0, 0x0) 20:25:41 executing program 1: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000180)={&(0x7f0000000100)="7c004e0f7eb6f0ae50030f1c62c166400f3a0fab0a00000004dfc5c4027d3fe566470f113b660f2f785f670f2ba80e0000002599899999", 0x4, &(0x7f0000000140)="f2df590bc46125767452e7875c3051c4e1f810f9c4e2fd1c43c1c1e3ab6546d3c63e42e200c402a947cdc4a2399ae3", {[0x1]}}, &(0x7f0000000240)={&(0x7f00000001c0)="c4a10dd5961d000000c481235c1cb42667f20f12f5f3436f42a4c4017c5aff3c2ac44178511e400f13ae00000000c481fc510b", 0x0, &(0x7f0000000200)="3e410f01d845894d07c461ff123bf0f69504000000c46331782f1ac44175facb460f6f14a9f0440fb32f450fe4167600"}, 0x8, &(0x7f0000000280)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) 20:25:41 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x6, 0x0, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086201, &(0x7f0000000280)=0x5) ioctl$VIDIOC_G_JPEGCOMP(r3, 0x808c563d, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}, 0x1}, @in={0x2, 0x0, @empty}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}], 0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r4}) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x5c}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(0x0, 0x1, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r8 = socket$inet6(0xa, 0x80005, 0x0) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r8, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c) r9 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x0, 0x400400) r10 = gettid() syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') accept4$vsock_stream(r9, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @hyper}, 0x10, 0x80000) getgid() ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000240)) writev(r5, &(0x7f0000000080), 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) ioprio_get$pid(0x2, r10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000000000)) tkill(r10, 0x1004000000016) fgetxattr(r5, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x0, 0x0) close(r7) dup2(r9, r6) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0xbba}, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000007c0)={[{0x7, 0x3, 0x0, 0xe2fe, 0xffffffffffffff81, 0x4, 0x4, 0xffffffffffffb1b0, 0x10000, 0x0, 0x6, 0x2}, {0x1, 0x7, 0x8, 0x8, 0x0, 0x0, 0x8, 0xd3, 0x1, 0x0, 0x3f}, {0x10000, 0x3f, 0x2, 0xea7, 0x5, 0x20, 0x4, 0x1, 0x80000001, 0x0, 0x8245, 0x0, 0x2}]}) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) timer_delete(0x0) [ 1128.123924][ T28] audit: type=1804 audit(1590265541.321:693): pid=17227 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir374862090/syzkaller.5NWs5l/1094/file0" dev="sda1" ino=16264 res=1 20:25:41 executing program 5: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x82) sendfile(r1, r0, 0x0, 0xa198) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x400000000000030, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10) connect$inet(r5, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x400000000000030, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10) connect$inet(r6, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x400000000000030, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRES32=r4, @ANYRESOCT=r0, @ANYRES64=r5, @ANYRESDEC=r6, @ANYRES16=r2, @ANYRESOCT, @ANYRESDEC, @ANYBLOB="67222a7909f0cd98e63882a92f7efe5772c97e0000008000000000ae5bc47f68c86d38310eca456ad5080900a2c7639b", @ANYRES32=r3], 0x119) sendfile(r3, r2, 0x0, 0xa198) 20:25:41 executing program 4: r0 = open(&(0x7f0000000000)='./file0\x00', 0x40, 0x84) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, &(0x7f0000000140)=0x5, r2, &(0x7f0000000180)=0x2, 0x3, 0x8) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000200)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r5 = add_key$keyring(&(0x7f0000000980)='keyring\x00', &(0x7f0000000240)={'syz'}, 0x0, 0x0, r4) add_key(&(0x7f0000000940)='big_key\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000a00)="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", 0x36b, r5) r6 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, r5) keyctl$restrict_keyring(0x1d, r6, &(0x7f0000000300)='cifs.spnego\x00', &(0x7f0000000340)='/dev/ppp\x00') r7 = dup2(r3, r3) ioctl$EVIOCGPROP(r7, 0xc004743e, &(0x7f0000000000)=""/246) bind$isdn(r7, &(0x7f00000000c0)={0x22, 0xff, 0x1, 0xb2, 0x20}, 0x6) r8 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r8, &(0x7f0000000480)=ANY=[], 0x82) sendfile(r8, r0, 0x0, 0xa198) open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000200), &(0x7f0000000240)=0x8) [ 1128.241211][ T28] audit: type=1804 audit(1590265541.341:694): pid=17202 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir984313495/syzkaller.4Sv1HN/995/file0" dev="sda1" ino=16028 res=1 20:25:41 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0x60, 0x0) [ 1128.335786][ T28] audit: type=1804 audit(1590265541.351:695): pid=17228 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir984313495/syzkaller.4Sv1HN/995/file0" dev="sda1" ino=16028 res=1 20:25:41 executing program 1: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000180)={&(0x7f0000000100)="7c004e0f7eb6f0ae50030f1c62c166400f3a0fab0a00000004dfc5c4027d3fe566470f113b660f2f785f670f2ba80e0000002599899999", 0x4, &(0x7f0000000140)="f2df590bc46125767452e7875c3051c4e1f810f9c4e2fd1c43c1c1e3ab6546d3c63e42e200c402a947cdc4a2399ae3", {[0x1]}}, &(0x7f0000000240)={&(0x7f00000001c0)="c4a10dd5961d000000c481235c1cb42667f20f12f5f3436f42a4c4017c5aff3c2ac44178511e400f13ae00000000c481fc510b", 0x0, &(0x7f0000000200)="3e410f01d845894d07c461ff123bf0f69504000000c46331782f1ac44175facb460f6f14a9f0440fb32f450fe4167600"}, 0x8, &(0x7f0000000280)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) [ 1128.525548][ T28] audit: type=1804 audit(1590265541.371:696): pid=17227 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir374862090/syzkaller.5NWs5l/1094/file0" dev="sda1" ino=16264 res=1 [ 1128.611949][T17254] fuse: Bad value for 'fd' [ 1128.667283][T17258] fuse: Bad value for 'fd' 20:25:42 executing program 1: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000180)={&(0x7f0000000100)="7c004e0f7eb6f0ae50030f1c62c166400f3a0fab0a00000004dfc5c4027d3fe566470f113b660f2f785f670f2ba80e0000002599899999", 0x4, &(0x7f0000000140)="f2df590bc46125767452e7875c3051c4e1f810f9c4e2fd1c43c1c1e3ab6546d3c63e42e200c402a947cdc4a2399ae3", {[0x1]}}, &(0x7f0000000240)={&(0x7f00000001c0)="c4a10dd5961d000000c481235c1cb42667f20f12f5f3436f42a4c4017c5aff3c2ac44178511e400f13ae00000000c481fc510b", 0x0, &(0x7f0000000200)="3e410f01d845894d07c461ff123bf0f69504000000c46331782f1ac44175facb460f6f14a9f0440fb32f450fe4167600"}, 0x8, &(0x7f0000000280)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) 20:25:42 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0x61, 0x0) 20:25:42 executing program 1: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000180)={&(0x7f0000000100)="7c004e0f7eb6f0ae50030f1c62c166400f3a0fab0a00000004dfc5c4027d3fe566470f113b660f2f785f670f2ba80e0000002599899999", 0x4, &(0x7f0000000140)="f2df590bc46125767452e7875c3051c4e1f810f9c4e2fd1c43c1c1e3ab6546d3c63e42e200c402a947cdc4a2399ae3", {[0x1]}}, &(0x7f0000000240)={&(0x7f00000001c0)="c4a10dd5961d000000c481235c1cb42667f20f12f5f3436f42a4c4017c5aff3c2ac44178511e400f13ae00000000c481fc510b", 0x0, &(0x7f0000000200)="3e410f01d845894d07c461ff123bf0f69504000000c46331782f1ac44175facb460f6f14a9f0440fb32f450fe4167600"}, 0x8, &(0x7f0000000280)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) 20:25:42 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x6, 0x0, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086201, &(0x7f0000000280)=0x5) ioctl$VIDIOC_G_JPEGCOMP(r3, 0x808c563d, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}, 0x1}, @in={0x2, 0x0, @empty}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}], 0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r4}) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x5c}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(0x0, 0x1, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r8 = socket$inet6(0xa, 0x80005, 0x0) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r8, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c) r9 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x0, 0x400400) r10 = gettid() syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') accept4$vsock_stream(r9, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @hyper}, 0x10, 0x80000) getgid() ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000240)) writev(r5, &(0x7f0000000080), 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) ioprio_get$pid(0x2, r10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000000000)) tkill(r10, 0x1004000000016) fgetxattr(r5, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x0, 0x0) close(r7) dup2(r9, r6) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0xbba}, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000007c0)={[{0x7, 0x3, 0x0, 0xe2fe, 0xffffffffffffff81, 0x4, 0x4, 0xffffffffffffb1b0, 0x10000, 0x0, 0x6, 0x2}, {0x1, 0x7, 0x8, 0x8, 0x0, 0x0, 0x8, 0xd3, 0x1, 0x0, 0x3f}, {0x10000, 0x3f, 0x2, 0xea7, 0x5, 0x20, 0x4, 0x1, 0x80000001, 0x0, 0x8245, 0x0, 0x2}]}) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) timer_delete(0x0) 20:25:42 executing program 2: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x400000000000030, 0x0) fcntl$setsig(r1, 0xa, 0x37) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) statfs(&(0x7f00000001c0)='./file0\x00', 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}, 0x1, 0xc00000000000000}, 0x0) accept$packet(r3, &(0x7f0000005d00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000005d40)=0x14) sendmmsg$inet(r1, &(0x7f0000005ec0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000300)="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", 0xfc}, {&(0x7f0000000280)="18914c8e4ffa5c33223d0bd99e81", 0xe}, {&(0x7f0000000400)="d9c7bb6e671e57b0b5ea24f5614953f62928c7", 0x13}], 0x3}}, {{&(0x7f0000000480)={0x2, 0x4e24, @private=0xa010100}, 0x10, &(0x7f0000000700)=[{&(0x7f00000004c0)="c7f540d1541f1bcf08021cc55141aca82496d5f5e609bdb237014fc584eaf19c21add4a96a1d4aa490c095d4d087eab211aa1395e2be92aaf313d8d1a54f904f6b3c", 0x42}, {&(0x7f0000000540)}, {&(0x7f0000000580)="9d14d9c447c862cb0266b0d3e6f9fd42514610da", 0x14}, {&(0x7f00000005c0)="d5a1fe58d9bd39a0b53ad79ce898609093193c8030a13e1f27272461e03cfe06375d31795104382654b8c0d2c2a244aad5f7940183a7c684872d1d8470fd9d107ec28fb2377a9115d57d532be959148998589d91f7bd18284ec170c6148e85f3c7ebc3d561e32dfcf18a", 0x6a}, {&(0x7f0000000640)="31a66c8bb45167eb7df0898f35cd4b952b236d978474b12233a975348dd7076deb5855c3327f6cf28a82fceddf75059e902ccee72f790eae5646c3799da0b3eefb9f40729c97a03599ebab781d9063ac2659811b91582d9af1a53e5f23046a9245c5e9fea616d5d7625a77b55fcc3b9669f481a089196545ca4d1ed252db79071590b0d7e4b59e1479c51f9f004a84945840f8b9e848833e83c003e8baabb39624dd57c021353445c8de", 0xaa}], 0x5, &(0x7f0000000780)=[@ip_ttl={{0x14, 0x0, 0x2, 0x3f}}, @ip_ttl={{0x14, 0x0, 0x2, 0x81}}, @ip_retopts={{0x48, 0x0, 0x7, {[@generic={0x83, 0xa, "2ac966ff0e44581f"}, @lsrr={0x83, 0xb, 0x74, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101]}, @timestamp={0x44, 0x8, 0x3e, 0x0, 0xb, [0x2]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x17, 0x96, [@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @dev={0xac, 0x14, 0x14, 0x31}, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}, @ip_tos_int={{0x14}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x32}}}}, @ip_retopts={{0x6c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x14, 0xc, 0x3, 0x9, [{@private=0xa010100, 0x1}, {@rand_addr=0x64010100, 0x800}]}, @timestamp={0x44, 0x8, 0x34, 0x0, 0x6, [0xfff]}, @ssrr={0x89, 0x7, 0xac, [@loopback]}, @cipso={0x86, 0x38, 0x2, [{0x6, 0x4, "952b"}, {0x6, 0xd, "d331ac5f4121d9665eb928"}, {0x7, 0x3, 'U'}, {0x5, 0x9, "a99e220c6181b4"}, {0x6, 0x4, 'ai'}, {0x5, 0x11, "0505ae62f493dd3fa798c9b5680fdb"}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @remote}}}], 0x158}}, {{&(0x7f0000000900)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000001c00)=[{&(0x7f0000000940)="b53116a0098d0ce6db144562ea59906ac348b24a4a4057a9367ff92a057f58ffd38f6740cbf85d6e6f00cf52c408f08cf410c4542c0f2caf07b53ae65b43a016027541dc2e930a2226cde9d9133685d1bb9a9c43e5c86018d76bb8eec95e891cf3", 0x61}, {&(0x7f00000009c0)="4b2d4b5885c051793d90676d62cc1f566e71c27688c4e3ef433a97a412afc6b6af86fc73e81bf1a7ba8ea87622d52b53bac6ce928ccf701d6f1556e0f71f7a9132463aa3c1069a24bb1047b48ad24c6f729199337d558a57d160858458eda10fb3654fa23baec1c41eaaf6d2dc0cdf96c0436cc9a9be57f2497428a5077727ea329353a324fcf232b3851ccc2deb8d88b31b4062666adaa754fd02a90b1be1a6422eab19154225dff3d72f8ba9034c23107641d504f504d486e86b8585f427b66e8a2f8d16f224872495eaa0c11fccd1af907546d8c7ca06121a76db", 0xdc}, {&(0x7f0000000ac0)="da4ca0917be0d996533027e38a21a60ec1cc487f4a92e0a43f6ba4bfddfb5105416ef4d2f70fd86306241a41e061c5e3444c4bd13d34d30fc06c08491e0b7caca0d0c014350d9ddd29bf3c86e2f189d912d3", 0x52}, {&(0x7f0000000b40)="f497e3bc3092178db5f77874cb5e373afc27fa0604b9dd7cefc08b7962ea974b02337617c5327c410b4f2dd8a014e6732aae6b73aa60bb0f81152818e826e5f289d598900fbdc2f49747e5c93d21bf26d5a813915a93d5c0c9edb1ba0106c533f3d0c8b9e3030723c3dbfcbafad8d796da0d301fe808b42c8996e651a3319e9acfd6f5be552174055fe1543ef3e6c5338e8942b154c5cab9e5b7e6ae0f7cf926f35e66754b5391e6658f35c2655352253769d935412f2275033a96cad581c17c64f57b9208cc8998bc3746184fd92e5a5fd8428f99fc0e8225ad9c4f82c59d0876090269867d19146fc805ae3daab9403d0325d4c95d953e2fcfd1d9affc701ceb4784396c60538857326608a5dd849205de70f6f3b564d327513b5d3d2c760fa6b416c4658ed5d087a99dd7a7ad431c0c54acb4a82da0de0d2aa59c49638a6e380d9eaead4105cebe47cbd89ee49acd0e7b7c521fb733e5cac29a9f900bb34cf546c583a7b073cce0437ee4003ba987398ef483c92ab891f50f4b6f4c930c55ec6565017f6e8d0d1a2ba59ab7f3d3d948909a14694cf350113f77158160af6ef2e57c8c267c6bd2310da2184162201d23e5901afb681fbfd2f218e8dda5b6b99012112e3343d82d91e5e1d8f8809bd7be89d56f6a3858329b095b568e90ae325063adc978048194774d640bdab152b4fb9b9126fe711eda343b9ab53fb2f09107080a38ef3f38b0c081a91d7a417751f5829bb5604feb752e65f3325025281673aa1ddc9bb3935f242c93a951102486e70abb3adea66e37966bedea2278eb77f01c1519bcf14bab5bb9cb755d5e98970c15375eeb3423f657985a9e390a1d8e65f137ade53745e8dc423766fec746b074f04cca3d842c638d6bbde1cf9887abbab0a5bab6466bc3e023e8ec843207360457d80f623b7d0e2243438dc19ce55daee121aad12c408b98f609b536418785170677d620fc3c34bfe3c7a31e079513eeeb9f741d028be39bcfad12c1b53c91c7c031fa37e87062c477378509961b6aadb4482a91df3db813f0474f3d54c43cbb9315018e42be664b5dfb7388d3d846126111dc7a9058836a69feff0891d828fbe13e4c6711b53ceb564b7f9e3bbddc467115a482e9e8a7ad757d420b7e7f87eeb63ab6d8a936b80dc07c156fee199b8fea7342b8f7bbddff9b192b94dbb9297b16f1de77512f7b7a2c927a72cd7a84df914fa4bf3ebc7b28bda0ff7cbe9c226cd6e82b62490a6c3a179f749274d6ed648ab4b2581255b40c2b43648f13b5940067644de7562579ee85c0314f0ea13f43a206865168093c56ee1ce2715b6af3d82b33406205110a4d329699c1ea8e7dcbdc891e8693c81c783ec8c8dec78ecfa1e26f699ed59381f3e63ff9a6cd0b29f62cc2b168c5f58b8d6912ee78dd7064fb48c8b27785304ff78b05c9b0ecc2b622371f3c7df915f073ed753dd6a8f1fb2ca37b0c459a4f2b768252dba5bf4b683a0d107190403f4621cd2f440039127c661be07fdddb1c83b108cc0cd2bab1d0eb9b7fb2bb5a3ead0672cc56c7c2a21437211071b3d6d2ef199a5059dd856dc131864ee01daf02f0fc244a0dbce91e70067b47b0f4aab3ebe01cf0f124a4d410cd89b283def5a82e99cec1f185b7fbbef720c59258c649eb1ffa1565dc7a8aa6b11580203f33028032b9fb1d8fe8a6ae557a01f1ba755e61d4b08c56ec8ee9d0e510d81877a7eeee4d85989460079a026d18a6c6a2b3f65688352097606673487f479c26af0a9974a4dbd3c32cad030f80cf3c25ede6d318ced1f6d38b5e3a1f451cf299deb710c84600403c0b3772dabd990e3f38ba2ed5d33b9194446cbbdfe7cb17990ed07debfa23951391e25112296c08475a00a203be595238db1ba4bf30ae46725e1b932f74f858096097f76c63019d0df47ac18a0b01e6542a9f08b47648fd8b020c593d58189a59ebb5ad69a36fd3b6f1d3ebed4748a4e94879c665e21b20c99adc5160605e5ffc70a42cc3c607408b2d14aeb6ef15e330df9e528ba86a627d8a14a449863825aa4196a306bca2f3f8726fae7dadc5346deb0a6c8640a41ec03077f0871f75b0091489b155a6ce3b3b6181142806ecf92b0937f5ff8d21caffd9f8670382cb99b0aa16fa74b0e495847dd58388fa640d23d1cded47b287568d8df6222a06ebb3672ef552134b785c559ff0c25efadc99012699b43eb747b895d301d7a6149c03705cd33b5dc15734b56fa25171d1391c3be09c0b483eec1e700d508b306cd147cb154c809f07f861bdf78e6b8abb7ac208f6234d19a4823d1a070a6a3577803fbcfc1b9a3457f25443255237d0c0abf33f19361ee877b3e163f631190dba768ca4225af52c80c39afea4b66003692c6b32b62174175e45bafbe56bc2b428bb6cabf282b289acb9dc16535d04bde3d7920230af57d48d0b8210a7745faaa2f8d2f0570a7a73018754136ae362d1a40f67d4aee8997fdf595119310ab0aef7c7dd7ee204f5ec1f52b423c523e386fd9831762a35bcab893104d4b77f55b641f5819d0b787c42c1b3781103eb57f7db93419ff617c638232491d4fc8dde0fe39371fa09c09c21565e0e5b48ca585fdb343364d6cf1cbba55e7de4bf0817f64da5fd48e9e4ab8c177b110b57e0685a0163a4d229506bc5bcfa923f750756b18bfbb6cd3f68fd0bb3b3c275d535df3e7009148428b8fa81ff6f8b6313a33d32f456be85216a4847557ffb3b639934d8670daf67c0c71a25dbc735f91938e6d5fbc136ccc9ad8ed819fc53af76a7f5cdb60e0f964afa3729d1aa44df23ad9b5dd57d317db8de19fa4460c174e49362a7f346e11b6a1d6f5d8e2251eeefbc44c230030bd779daab5f8720e57f2edfc1a0c3dbf7bd1c34909e5782d03e37696c6abf2242730cce3c784d7c29774365fd037b76636da778febce7e074a888f373776d8b9c5529a76d6c065f5ff35511b6e4fcddbf7a31febf2a42215de753b0cdda2b75e5de7ad144cc9f3ae2fbb94290115b5ac8cf16d72b5e136e099e02790b6e45b4cbd2c87c63b63e194f312f3766518e25fddd67f3a6b5526b489677acdbf4da737970576316bcd83424fa0665140f6c10929f212db2873474f0088cefc9a1a9aed8c5b34067221e3c852c8884c3a14fbec92cef17c7335b56165ab9e0dc6d4df5cb0cb1e42e8f1b26ed69315a7d5b08c9bd4ab3d7c690ad25c3b8a5fda11d1e7fea04755f4af0202920f6a450bfaeef9b36c1f9eef20aa4411ccaebf094e95b3086e93fcfbe3c573499239c3c2750425125722363a3ca84d08dd0eba3109ffb4e66ba7722eb00443bf4df8cebc41886d4604a3dc2264dc6587890fd06bfadabda5ca17f27ebdf7cf644220a3636ca725dec0f14367ccdfda30f9a7b0ef8d207ddf8d447931aed128c7f0c8a5a71e7028754c1ea8eb487dad0ed4cbf0d4749e5ff1f069d0415fd1360c69060cf0cb6290ed84f40741ebb1b5618e4031d5c62b469597b83cdb9ca02458047e9f44aca044e8102151f06231db17bfa34df364e9c068c0995ed227ae61dcceb8f991e4c76627af3c4ac662efea789010c6e8d71b1c74edfb4fb1f1c10a9612751dad6082acde7abcb908525b75522392e8b25bb6f2667006f87c60b06f8f09271e0bd4bf86bc7d0e477f88fe69b13bcd13799fdce73cede503c5ee72a454471644d4a03e5dc6ad0d8e67f7a22952ae39bd1aef51c92acda24e922ad6eabd7a670bea68388a39779d610c543614d357c8c77a1f6edb5d1f9de51afca49261a53ff781274486a4a9f4d464f01ce863508fffed1de739edc7d6858fbbbe63ac3435d75f24327a47a51055d2e581e704719402eaa382c0eed52208441bef6fd51d127942eb7bd7d387053ae2ccc380be482c1f563907fcf204a7f79d6443d6ce2ab319b30c47399e3f3fd3ba274e62eb444986b8df9c0f0d3d157da683e6322a29066217ef9824366700c6682539100b1ed161a7b80b703929beb32b3a4623c82abbef12c74793952571736ba21621d52a9734e4e0b41c37779b5130614b6d40444174f92a1c78bbd82b517cd0b0deefde96f056b6883d0e0e03022d69fa3428bcf335b7f9e905254a5c817f4c7ef8a76c29604a801b30e8dd748944c1c77fb71d1b8b4c7e3481328f45d811b339ad7f706f710170ec3af25c1c23946933cc265c1f4c41658b3d3e91a408fa6c1135fcac14a1d239e1d8345fa78f03cab4f6393525077f91c96181d02899d523e610597cce020673694b55280036d9b3e59b8176fdc32dc6517d4900bd93401b1152ab9a2b978e415c493a080f81239b5d5adbe1413a421b607983f1446769683947b07a5adc2833363dcbfea3ec631849911479be261e480ce3905a8bbf256d055dd37b78af440c97a0643e7443ab1a03f2e09e242919ac56ebbb73c251b4204bb40d510b3a5c14468156b717dd434ddb56f154ec4460e95366b7bac70b6488ef5c67cba5a5817efc4f752c32c8f22fbbfdf1ce8a35450a16d7bdf714e412433b78ab8420851b1955617f27831bb694579df485c544114fcea2d80fea841b3682966a50193a2b932ea5fae0d04623d146cea063b7ff0a0ac41b5fc1c0a3d339ef884df1fc9f26de6d16711fb5339689c657c599744f394afa1de559fc6536e6ac58ec1176dae114f03f452f964d4efe7ebd86e1618abbc0cba3ee4a5de266a57261cc7ff43bddd4ec4f5eb609987348c81e64c2e3adc7a41b09c4d12986a926a907d94099045f16450ef8384219137933d38896852bbb9b4635dfa4023e7af98cff472a24dd08b5bb5418d0f168e5aa5275dd03b32329e4387cf8678d80027c5dd665c2c6940c6c598c80767de235aaacb78713bab86cd9129164e6afae7b1841911888f36f25f9165e5f494845455db07bbcfcf919bf378211499a790ffc7763377c9b862bfaa98cdcb0db1217ee157abb535d95d13404a853e047725f8292c9ee2ad9d3f28f254bbce8c45b1575aab9a695598d491d6b6faf95c6e7d6f6d03735d8350a85c01585fc7a017d80ce7ab2c2a50b5dc8306c423ec0e92890a960246b699b8343b49da8fff395c961ad2b9bab96f17763cda7366e2f774feebc6969219b22d4ea1120ef6021c518034a9eb23a7ec713b6caa0938e1fb5db822434cbef6da42e137d07d4703def2535c9d84458d0886466f8693f4f556d385ad12ef202e037dfeb565022047b9c53e0a85c0d725023e8d4ec095fe9e71c25934f4af88022ffb30eb4f47976cfe93a4ac88f0b323f4cb21d0b8cd4d1c2119b0c759111bdccc827452df5c8e8d86177cc5dc7ce549c68dfe7055e00448777e676a0dd71d286f8f3274020441d702310648f4e80cbbca50f190c95fcf9a3fdb86d58a113552ac5ee985262ccdec728e29e6b4e6e2bcb9d792bd59ec86dfc548588c751011d12ce35795b6f023d1fa12f5c71e03ed4cf119a8d4e78b8f8b1c439acab9ca3e9ad9390ae422acda77de4aae67872c13ebb1f720e351b4ed4ba1e3a5ee9e6e7ae4bf5a1f4cbcaefd8bdb5f31a80a2e242c0df2ee9e438bbc2ba9bc19beb4c3a10c8d4b4423bd4b88df56f05aba3994d56d5c3d5a78f6159f6e5a5230d174153e6b2e92847eb211848223925491c731e7116b82b6e99fb2a591ac217b534457e526c5419cad2c6d0fda2b38a80a6c806eeb18feb51396672b15055f17a38bbae342752fcdc436eea90bb056a2c214d94f8f631a16ff062b1b9042fd18b7cc0dfa954b014350212e45c32fc430dcb091cd04213ef9ddfe48416694038df05de8", 0x1000}, {&(0x7f0000001b40)="1b973d5526b79490e6c73ae321c647ab8af698df3b2f2849200b1ff3bde69ae931419b28a3591cd0cd9af57553349432adcae09a1da637e65bb91b6afb89963c5953213bb07b8d627af08c99cb99ca9a9bde2510df9a0b1e6469c8aa51e5bee5412e3878d28af58840d7eb786f7c102403881e97", 0x74}, {&(0x7f0000001bc0)}], 0x6, &(0x7f0000001c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @remote}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8000}}], 0x38}}, {{&(0x7f0000001cc0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000002280)=[{&(0x7f0000001d00)="679e5e1ae1c581160c370ede1345a2718c1cf801bb92a42e833a836a7db412c816475147b549d63f28e17b7be93baab0095165523053b969ca525cff728df1ce632baf7e67baec040a26f6225258da13c5598aa98a9a2e298cc5303238c134344aeb02999599cc8c754f4aec2c185c4add9cba0b1754f4e4b18bbd491afde0d16419cd9da3f516a2c5de3f", 0x8b}, {&(0x7f0000001dc0)="89a4231da667a644af6d1f35e2a4e24cf5deb2467d4b4e64e83cf865c623c9c280dc2ba708ce75222e625988a433124792f7a5e1a6ef9574d85fb2f0a87525f6bc2e4ac5d561d96ce5f7671a4e66acc722ef5dc89f3350dd7a66b864d8e4b11becf206711397892f5b64f8d1795a4727a181772faa051a3d4c351e7c33caad0595cef8afa0308d0f8f0632d4", 0x8c}, {&(0x7f0000001e80)="d318b84dcce8764667a6be0530448f8dcfb57d05a2dbe4e68f562fc1f55cf1320602637600d90642cac1e469b9b3d3a251c7796223c94b3d366f6b7159", 0x3d}, {&(0x7f0000001ec0)="f7d379a07bc2b8916171321aa7ef9ffe8c2fdab86376af2685258c2e6ccc3d6471f7123f792e38da44a7abfc859a71fca785dc2ce4d5cd9f4c69a692e9200de430ce0a472f5191f9083e0cb5ab435374d7ee577712bb0603909b28ddbf8bebe69c55", 0x62}, {&(0x7f0000001f40)}, {&(0x7f0000001f80)="f2e49ea3647277117fa0ef9143b963c5d73e4f2dedc00dd515e5749c7683505287de7ceea1147bbdabe3853dba4cc6201a71f80c378adbc4a63fd2a11880a248739806fd0d9149eca0d68df8427f3563f00a459c2d4b49109e4f4c0d2cd942fb795895c4f4e9b38a47be81f42d959c0b", 0x70}, {&(0x7f0000002000)="17498796a343367044da9b89220b3e6ae5742270c20de843a7d5b237b2ab86521a09d0a30cffdd2e18c13dab11be4c7ba37f37b6fc04685f95987d7e4a358ff56c9d126c53105446210aab2bf9fdc44d6eaae7b6780e220163a5cc5f8c94ae72fe58850cfeee75e907dc633c888b5073cc880b7366bf449464d2d8db2c2732cbd1e5dd7c15a80c39427aab", 0x8b}, {&(0x7f0000002340)="1c117828acb80443e633e5353a567b64d6952a61ae8c5004085ee05d59dc7a032d6d462f9a5fb9089143dd2a9401f5feb2d045f6c7b38995cbba069a2b08576a5dd25b539d45836b79aae7f5c476d5f18ea240a4907f987c6e9f3215a93b4fbd3545a2703fcccd9a11e28eb3aee170c0b0135b967bad371b4a9361e67a851fd9f0f02d39b190363ce2587225b87e70373b5fce6a97648e607351dbcc74fee1a5cf4dd47ea9a1ced5deb8f2cbbaa1c47f4f6b4a758915bcb62c7d0fc3e5f0f49425b12da03c098d59e9fdee91bb0000d94716fca65d44a21928fe0cc9604c56c99b8d658f139d70f228e9e676e13c196ec2355ab5eb2a6098d7a41b6a04cd614c1d73ee8304813c75930a45172b4de620fc3768", 0x113}, {&(0x7f00000021c0)="43cb9c1abc7b7299013cab0f294d78182bb22c285ec667d80cd128a073f7f6c1cd703f6d6b3938e410278b6a3c9d5a4c73c085dc084583c49db929d2d6c55b4b7d4465102afc5526ac136d159a2210d21bc4d2aa33fbce7de9de2b7fa9c2820cec4e7a2a5f686a0138e2d4d633d30eaba9f624bacdb60b01a886c0092ac731342ae9bd42eff2", 0x86}], 0x9, &(0x7f0000002580)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x20}}, @ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010101, @remote}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x40}}], 0xe0}}, {{&(0x7f0000002680)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000002700)=[{&(0x7f00000026c0)="67c127cd23d4c86fceb43870672f1baccf4921d6a0f41e36119ef81e6573191c96accfa0ed8989f9922a286c360fffa21ae0a39bdb8da1e98062dd55", 0x3c}], 0x1, &(0x7f0000002740)=[@ip_retopts={{0x94, 0x0, 0x7, {[@ssrr={0x89, 0x17, 0x42, [@multicast1, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @loopback]}, @noop, @timestamp={0x44, 0xc, 0x4c, 0x0, 0xd, [0x5c0, 0xfffffffd]}, @rr={0x7, 0xf, 0x98, [@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}, @cipso={0x86, 0x23, 0x2, [{0x1, 0x10, "7a996db3740292a29e205d595899"}, {0x1, 0xd, "947363557545d5585a2b2f"}]}, @generic={0x7, 0x4, "9164"}, @rr={0x7, 0x7, 0x75, [@rand_addr=0x64010101]}, @cipso={0x86, 0x14, 0xaafb264e2e39c027, [{0x2, 0xe, "55f137177b561ba16ec1552f"}]}, @end, @lsrr={0x83, 0xb, 0x7d, [@loopback, @multicast2]}]}}}], 0x98}}, {{&(0x7f0000002800)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000002c00)=[{&(0x7f0000002840)="05a5245f1c95aebb68ff2bbec9b3a8c79a9143006f33e4af29f9005a8550ed09cc015fd245e11d2c85538d6524aa6e54c1d5c5", 0x33}, {&(0x7f0000002880)="f65b0e8260b54fdb2219ee952331707c9b0b3d01c953a0a14d6a4548fdafebf88627bb86fec7af515a620919da3472ffaddb9159ebb1f8ed5f5999290dc3315081482108c2c0f900f8d0519015e8c88d9161314999c29603e512396c64210847410807c33c2c6666bb1bf0d9398f39d89d7f624965618ff5e2c6497238e865ffb894abd750850784448e7190696f348b1145598feecda29fb088d5383a4cb48a7e435a31b00e8419028d10d7a9e908cd539403dc52af1e", 0xb7}, {&(0x7f0000002940)="66a7152e2802e0087ac36fa3651164df7132351ccd3d4b6d8c1243635ac4cbea6904ab5c02d4f720e1538bbe82664fa7fc8eb026c089acaf8940a73f9bdc54ee72db10ae66425693b709b7eff67915c26a9665090d1b78c1ecf3345998da385e81b0bdf15544440bd9f13a39bbcfbcf93a8f69d34fe016bd385a7f1d2c226b77f8b6e87b22fb88a66ebb8257e807ec02737acda99fbff16bc884e6175dc33a2975132f64ecd36b3e1264e105c53a1a77847e34389f252a07aa8426b9", 0xbc}, {&(0x7f0000002a00)="b07f515095ef14145412582c2ca83706ee726eaac7b577cd071c316aa7e0d67de4dd599519a2e62cdc7e1ae797c0365c9ff6ebc5632e73f4f3dfeb6878a78e9f5e208b70169c7dcfe636a2fdaf09776a61121c53177a0196536cd038b478bd6c900e5e00c77f5ee478821d77337b055d4b0da0427bbce4abe11e223d6c0d645d51fce17f31b4a7df9de7a0bcfe5b3d4a1544a1cc0ba345b519f4a435929b12fd4bdac838b8f8e0bc11505dbfeb7a7a0e3d04a510d9860300ad0a04af03ed6497568b7d8fd806339040b639b5046e192c377857892e5c3f", 0xd7}, {&(0x7f0000002b00)="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", 0xfa}], 0x5, &(0x7f0000002c80)=[@ip_retopts={{0x18, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0xfb, [@remote]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_retopts={{0x88, 0x0, 0x7, {[@lsrr={0x83, 0xf, 0x28, [@loopback, @local, @broadcast]}, @timestamp_prespec={0x44, 0x1c, 0x9, 0x3, 0xd, [{@local, 0x5}, {@multicast2, 0x2}, {@multicast1, 0x2}]}, @timestamp_addr={0x44, 0x24, 0x6f, 0x1, 0xe, [{@multicast2, 0x8}, {@local, 0x7}, {@loopback, 0x7}, {@empty, 0x4}]}, @timestamp_prespec={0x44, 0x1c, 0x9c, 0x3, 0xf, [{@dev={0xac, 0x14, 0x14, 0x32}, 0x80000000}, {@private=0xa010101, 0x53}, {@private=0xa010100, 0xee51}]}, @generic={0x86, 0xa, "95643617b6a02837"}]}}}], 0xb8}}, {{0x0, 0x0, &(0x7f0000003440)=[{&(0x7f0000002d40)="2358ef07aa502fcb841e4aab1b6afa2e07f27b47d850256d12f999bc6704cfee718577e95a523aba0bce10704bf6a3d7ba001518bf570f9000cd7ed76465d9bcd1669ac73d200d927318842bbff75a6042043d02d097c88d0775646d59f74251caba3d5cd48d2bd74b40df94a8", 0x6d}, {&(0x7f0000002dc0)="c7844b4486291e62f38e7df53aba64eaa865b20efd4d1f69e203ea56119de5d29ebe497d04d7e8b9975e80025baf91879abef611359125ad5aca21e130e8e62a3f5a83d7574988b4e13ee7728a68b6098fb1ad2ce8cf030bc1b6264438b810bbb1377b89c4b45f16dd4e4060c3d23ebb05ceccb4e1926097de82684a83a7afaa3c0d9481e1b5564cf230545a2af1efd34b9066f90c0fbf85151b791339a463dd933b366da25099c4d6df2b17558be5f5e4230a4a263bf9b5a56c1343aba101011d0d8a048e468fee8e56d3", 0xcb}, {&(0x7f0000002ec0)="8be502765655517ca2edb1789ab42af50917c34151b49a69ae4016bb057b31fa1e60731135ff87e08936b6ac40eb6d613325cb040b182c2d86dd94a411d4a12c8357a82ccbe6e8861a8ddf037283ea7f09ad0d3c27ccbe43b397ab9206fd048fc1c7d334827ce840e37c9ed303d0650e93aa08f83746f1f799c4c1e3cf11", 0x7e}, {&(0x7f0000002f40)="c641f1469af86e634ef91e81c01a64c0befdb233803d13ad61e63e40c0285e4bca552b4deedb26c13f0607a3bd610bb6c3fc129544ad5773d32f91571108a0ec0d0c6c6287ade6bf5b68d85a26f6349377474186b620ee11dc67ba73a9444b16bea09b59d827586d66d71672d80a2a030b76c2f93131dc4f22972d5b1e02af30108c7ad536c93a2040110c698df96bb83d5997da8d6d071ccb25670a0ad0aa632d70b349fc04c934325f616721e52c282652ef580e4fac4e9c304f", 0xbb}, {&(0x7f0000003000)="3d50a5ab43ed656a66e892aba4155cca45033d57bd448b3df8161b5a5edad7e8c43bda13a80364edccd526b030bec5f45eef03cc11375313b0ceeaf203415cc8a75f5d6545550bd41dcee405a077784679af834a8d35cdc416d057dc7614bc7b7e4e6924afc031cd5d7d8f65d094515e0e31ea889fa951c6c4e0599e8709fe6df2935181f223cad6d305ce9d507288f9efcb2b689043b9d1369ba1994f4ae58eac3e2328f46e6f8523fad3928efeab615506c8f51b251d8d866e4bb4187736ab49e509da4277dac492732da4ff77dfc6b15a6c1e21fbb6eb1f8712706667937fe83f03cebf90e79c2c8d32e79f7a43af", 0xf0}, {&(0x7f0000003100)="69a620ec4c9e8e0b128b78bcadcb220d495d3a7e4a4962f30844931449f13e6eb235477cabf95576e87e6d9cda562a05b4ae139507e0e5c893f51205cdf2dcff1b645c9ece9b0cece2b5acf0bf13bf62150111be339ce7849732eeafbefccd2b62705d81395bfa6389177519a5c9d157af16731d53dfa4b05a4ff9fe3b842b5ca54b7c7f7480f428226bce98e11fd5051f0a1b9192a9417f2ca1586e0d009d9b4ab93915c26f97c6b16d62c56bb4b50c1cae2b3b27358494c01b1065494e6b3bd65c74ac833385e011d24f270aad1f5cf3430900444ec6755258d6d841620ce11b708724323765a2bffb10807fb2bf66d980a8a99dab", 0xf6}, {&(0x7f0000003200)}, {&(0x7f0000003240)="c8125f86455575b1d5ad08f5ed5a48bf8fc5f22892c27f4844ba046621846483e7b0d698cf438f6b5b996bf921646296c47a02cbe8876c11b7cb396783510c66079394839d8e3b809d24ac0a2f9e00e2b0301f4cb26561616803ce6c4d", 0x5d}, {&(0x7f00000032c0)="1ce73a12516e0f616b813817d400dadfec0ea1796e50d6c7e821eda5079e733f5ea8072815f3a1b1156afaff0e3527e2c3765e3f04a9b0694b4aa7a459e130c3f7d023a116565d2e42609434826efd20166d5e03e19fc50e3290549d6728e6a83f1b37ff99517bef52f88c610ad4d78be397b790eb978d420900c3eab1a524ad353b97a7fb9c95d0c524a764fc5c5643cb", 0x91}, {&(0x7f0000003380)="d43e3a5df7370603f331830a6f4bde28f71d3a7adf384c153e35b01a090736887bb4c4fbd5d0819a84eb06aa14968de843b7e00cceb205b97f99ba0fcccdb9b0da461d53fecec710f9984328471ee720ece33e58313edeaacdeae58b4f479762432d75d8ad2b5793a9aae2af16382789f3d351adfff60ee0f8c606835d3ef4836f8bed59aace75415b671424d12b", 0x8e}], 0xa, &(0x7f0000003500)=[@ip_retopts={{0x80, 0x0, 0x7, {[@timestamp_addr={0x44, 0x2c, 0x53, 0x1, 0x7, [{@multicast1, 0xffff1157}, {@empty, 0x9}, {@rand_addr=0x64010102, 0x4aa}, {@broadcast, 0x8001}, {@dev={0xac, 0x14, 0x14, 0x3f}, 0x4}]}, @end, @timestamp_addr={0x44, 0x24, 0x26, 0x1, 0x5, [{@loopback, 0x8ef}, {@rand_addr=0x64010100, 0x81}, {@empty, 0x165a}, {@local, 0x6}]}, @generic={0x86, 0xf, "64446970fd480e53fdcd8ffeb7"}, @ssrr={0x89, 0xf, 0xf7, [@multicast1, @remote, @multicast2]}]}}}, @ip_tos_int={{0x14}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4f}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffffc00}}], 0xc8}}, {{&(0x7f0000003600)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f00000046c0)=[{&(0x7f0000003640)="fc71d9aed520616b508b6471860c0a19c3db0785c0a1958cdb03ac2ec9755947ae9daecdddb8b9df4b86b52044eef26971750960b94b721b9668035c30655c49ee3433d7c4c7fef748f316c796a5befdd89ed3f664dc1bc7844efba51c2830db43e22a0c4a4a13a927ce3e05622cf504eb", 0x71}, {&(0x7f00000036c0)="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", 0x1000}], 0x2, &(0x7f0000004700)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}], 0x18}}, {{&(0x7f0000004740)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000004880)=[{&(0x7f0000004780)="1eb15bcb714c4cff9e3aa3b6d5a839c0a0717f9d9fd9317e95ea6b78fce256a007de40e37ebba4771b17b286616aa9ca7f5fd592e316aa91f7c20d4ae9b5ed5f84d365f3e109a708f1c16176fdaa9338dca562d701dcdeebfbada50f772d84dc67096b7d93108b6fcf25bfb10cf7d91c52232aeef550f6", 0x77}, {&(0x7f0000004800)="a949ea10a1fdef58f590fd095087060e7572e6bf", 0x14}, {&(0x7f0000004840)="8adfce82b2918c228dbe3cca4dea01fe2d527cbfea8470410bb4f26d", 0x1c}], 0x3, &(0x7f00000048c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x100}}], 0x88}}, {{&(0x7f0000004980)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000005c40)=[{&(0x7f00000049c0)="14d41792e8", 0x5}, {&(0x7f0000004a00)="8b4d2e9663a460099391c7a640be55e47aae9b1199fcf540e3e559258bc3a99610e8593f12c18572be0852ed8cc9c28bc9a48b3a848effb71e316dfe2137994277ceba1b22e036e10b8e8927edf38216e93a99f50acd350c7aff219cc33336d963619afa6b24cf54ca35541bf842be23d3248e81244f45bf94383228abcc8a99ff9af906e61621b8139eccfa51a34ac2d057fb9c19454350d1d598061a4278e1364f6f5c", 0xa4}, {&(0x7f0000004ac0)="fb07e09063af7d9b6f49b77bd38b54275edc10e054d46438ebc8739c29ce37ec43eae0fdc5b362d532", 0x29}, {&(0x7f0000004b00)="d577a89c31eecaf02024a157795f9786ad382e69fd1f1ad74692b13b961076f32f930c713376985a9bc69a4ae5718d1d2b1c6ffe079abf6eb1465ea214257eb5b86e2a7f0642f65c52a2e53677c86122968f3d8649b73cb198d55313c2e24745c91a76d6", 0x64}, {&(0x7f0000004b80)="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", 0x1000}, {&(0x7f0000005b80)="a0a580c69a156c67aae62f6ad1ab5f82e1af490e3b9a00b9698def088e390229de6c587d8a204c223542c76f12722e96f44feb8b19960be45a7b88a5e60652178c3c5cfd6c55b22b58617fbb05521b1993790530a1c1fe673d3d210bbf169dfb63394c9febc080657b8584730377eb5c3725dc8606716c4165f878b78d2cd0af3b69789deff7e90d04b86267", 0x8c}], 0x6, &(0x7f0000005d80)=[@ip_retopts={{0x50, 0x0, 0x7, {[@timestamp_addr={0x44, 0x24, 0x31, 0x1, 0x9, [{@multicast1, 0x4}, {@multicast1}, {@local, 0x5}, {@private=0xa010101, 0x4}]}, @timestamp={0x44, 0xc, 0xe5, 0x0, 0x5, [0x800, 0x6]}, @timestamp_prespec={0x44, 0xc, 0xe5, 0x3, 0x3, [{@remote, 0x1}]}, @end]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @empty}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @rand_addr=0x64010100, @broadcast}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xbcf}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x401}}], 0x118}}], 0xa, 0x4004010) umount2(&(0x7f0000000080)='./file0\x00', 0x6) r7 = socket$inet6(0xa, 0x2, 0x0) dup3(r7, r0, 0x0) 20:25:42 executing program 1: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000180)={&(0x7f0000000100)="7c004e0f7eb6f0ae50030f1c62c166400f3a0fab0a00000004dfc5c4027d3fe566470f113b660f2f785f670f2ba80e0000002599899999", 0x4, &(0x7f0000000140)="f2df590bc46125767452e7875c3051c4e1f810f9c4e2fd1c43c1c1e3ab6546d3c63e42e200c402a947cdc4a2399ae3", {[0x1]}}, &(0x7f0000000240)={&(0x7f00000001c0)="c4a10dd5961d000000c481235c1cb42667f20f12f5f3436f42a4c4017c5aff3c2ac44178511e400f13ae00000000c481fc510b", 0x0, &(0x7f0000000200)="3e410f01d845894d07c461ff123bf0f69504000000c46331782f1ac44175facb460f6f14a9f0440fb32f450fe4167600"}, 0x8, &(0x7f0000000280)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) 20:25:42 executing program 4: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x151483, 0x100) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x82) sendfile(r1, r0, 0x0, 0xa198) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r3, r2, 0x0, 0xa198) 20:25:42 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0x62, 0x0) 20:25:42 executing program 5: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x143442, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x82) sendfile(r1, r0, 0x0, 0xa198) open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x400000000000030, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) sendmmsg(r4, &(0x7f0000001a80)=[{{&(0x7f0000000140)=@pptp={0x18, 0x2, {0x1, @loopback}}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000380)="7dcb9fb713beab566dbff611bfc92b33002f05e66f0d8bcea19e6ad4cb26f8b25b2edf7463e4bf807c9278a5bcfb2e28da8d67d606f5d456926ae941c345e60d22bfd0b4cbf41132e3f579b639d27287894d82e8c105a63098140ba0901a70bd19049d601e3aa534d85f34abd9db358040302f4164d79a00c0f710e6bbc7063de2875a92f0f288f836dcc15ce8", 0x8d}, {&(0x7f0000000440)="bf70cc407551c7e99f95d849712789ee3c2cec32d48884746a5f0a865455ab6dd83d4e690a278d8bd8d0f39c86b23be9790ee977e37468203907f238163448ebfd6fcfe87c14e062eb4c072fe28a940166e04361a182cf7c147835809040a3dfbb04ebf0f6297cf94b62be7228e2b92efcb060179ea95e594c34f918449aeeef7c42108a42a5c655e1141878d640de1e0c56a3ce80b983de716aedca27591f736181ba180597c58377231f87767a43b86dde5c8f5f49ba273700b10012", 0xbd}, {&(0x7f0000000500)="4bbc4b0a83d997295ceaf60ca70466d4824d0aae7d379c6144f0dc53bd63706d88572bd90047fa7d3fc0ed2094ad15fb929bcc5dfffd396a150d16011bec42f6383a87f5c3ae9abff911d2679d79418fab0d09", 0x53}, {&(0x7f0000000580)="06b9f0ad4c4ba0c333bed1558478462ea955688fbf4ff7191496da175c5b2a1aaceceab084269764798d6d710eabf024f4b4d9aceee8efe03550ea3fbf8433d96bb1bf5601255e01a8f8978e6caf4a4d3cb249080421a9db17346943350e313538dc568c1dc5b8419cf910ccc3672c22e64839bfdc20b54564185e6694fb073e087d24d3124b023d02a9e67a5ea7a5fadc04c06809060b2917347f40b0fb14665bcf4d8ef6a41723b25872bcba7a71b58dca8725d4b4e4cf64491eeb745ec92f3004e952fbb5d6d3", 0xc8}, {&(0x7f0000001ac0)="883479bc", 0x4}], 0x5, &(0x7f0000000700)=[{0x1010, 0x109, 0xff, "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"}, {0xc8, 0x3a, 0x2, "96b2f05bc2002afc8e739d7e986166ec9e83a7da25bd7750266641e33c2fb09597be478ac6ba03c4f7d84cc50c9acb0ffb25ce2571764e73dc7965370eeabd778d4865ce88b04f57ff3634f8df124431ae891aa0372c471453c3999913962c5117b9ee2bd7bb80799e9340d27ba2bb4e149a4c603364711c698aae1ccade9f1d9d3105faa451f61e41650b9099026fe6649fa5dc6028a81be30393ffa84b77e5186232549811fdd2fa30d414f30a61a918be365fae0318"}, {0x40, 0x1da, 0x3b6be91f, "8ec27047ee7131d02e40e37426c562eb02969564a31c1a440fb09a0fd587b8af3275b5ee8ae327397a87db86437a83"}, {0x68, 0x109, 0x7fffffff, "6e37f81ad1b393d08300c5b394de6e72effd32e27c0a498762855bd165bb02b18d03432978c580ca42dd1138c826fff8f586531a2ccef862d82e831e8bdd9e0be5d3ecc7ccaa2140891773832ac48de8dfb1"}, {0xc8, 0x10b, 0x2, "ad1ebbd4d1c28e0cde75065dbdee902cdd5932cee6a551003e01d86f54eb492c80b983daa53f597f0940e19e5c525089596bfcdc3432e3cd75e5238c975b2e3befe65a5adbeaf070c6f58cfdfe17969e7594d608019dc75eff512e8b7bdc7ce118f94dfb9d917ea6bae99d0fbe95830408869a5b2a06a8a7cd807c7a853cbdc1f8a23e1f2d3c05523032201c0ff3a362fd824ddecdf504253c2d8c064d4f1bce4ab60ee8374579b4deac163c55395969382f6a8a7939"}, {0x88, 0x103, 0x9, "cfb1707ce3ad74f1dd88cb1cde5a0f2488ed0d30fde317776fa7f3d86d9d1d2b2a5db9af4696838be4800fbfabcd7e76de003fd589f226ee458341d430e5da74ad265200865e4a71e6cabc5c5af7a2a82dfe452115b4ffbebd740cc5a547b44a30a1500a1aacb1eccb4efdfe3d795cbf7af495fd40dd4e"}, {0x80, 0x10f, 0x80, "32112d12f512a694aca737925b8304391ef475fd869c180c45ec2aee511fee336a49d4196a1a4d66c9d7dc0fe1523563d7a9ba5c5c46d887cf14b839d5fb27c8ff66ba9fab16b4e51b1f619ce56a148641b32de550c9154b834f648bb45fcf7d7db3e1e80e87e5454b3d"}], 0x1350}}], 0x1, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10) connect$inet(r5, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYBLOB="3ed3cba0dc42c3ba72ef121d0e8de5f75facb4b017d1eeb95c9cab700f2847676c2aa5e8bac158797696fa024a69e365b62cac6659682936495b2f06a74d882b55dc9afb9322a2ca56eebe848cc9b1fb17d34c83e6fb09810a752fa84211a3788eb6802555824d7064d140a5e65c0e7e22c7d7382416f3c95e530c", @ANYRES64=r4, @ANYBLOB="c21dfc04c682534243df954c2a7141ab861a24f968eb56fc74e5a7c6e05b514fe190e2e4a16ccb46e54e1688ed41c158180aff3f466fc7bd4d364c12473b1d26e6bea5fa66a8647dbbf668050443d4ebdf60dee4388734dc76628a107a074c52ac28a7d7310504311b55ad807ab4f4458ef919777b123af0d6322b426850a868413daf0b6230", @ANYRESHEX, @ANYRESHEX=r0, @ANYRESDEC=r5], 0x119) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000000)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8) 20:25:42 executing program 4: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x82) sendfile(r1, r0, 0x0, 0xa198) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r3, r2, 0x0, 0xa198) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r5 = dup2(r4, r4) ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f0000000000)=""/246) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r5, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000080)=0x4) 20:25:42 executing program 1: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000180)={&(0x7f0000000100)="7c004e0f7eb6f0ae50030f1c62c166400f3a0fab0a00000004dfc5c4027d3fe566470f113b660f2f785f670f2ba80e0000002599899999", 0x4, &(0x7f0000000140)="f2df590bc46125767452e7875c3051c4e1f810f9c4e2fd1c43c1c1e3ab6546d3c63e42e200c402a947cdc4a2399ae3", {[0x1]}}, &(0x7f0000000240)={&(0x7f00000001c0)="c4a10dd5961d000000c481235c1cb42667f20f12f5f3436f42a4c4017c5aff3c2ac44178511e400f13ae00000000c481fc510b", 0x0, &(0x7f0000000200)="3e410f01d845894d07c461ff123bf0f69504000000c46331782f1ac44175facb460f6f14a9f0440fb32f450fe4167600"}, 0x8, &(0x7f0000000280)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) 20:25:43 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$USBDEVFS_CONNECTINFO(r1, 0x40085511, &(0x7f0000000080)) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x80000, 0x0) write$binfmt_elf64(r3, &(0x7f0000000480)=ANY=[], 0x82) sendfile(r3, r2, 0x0, 0xa198) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000001580)=ANY=[], 0x119) sendfile(r5, r4, 0x0, 0xa198) 20:25:43 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0x63, 0x0) 20:25:43 executing program 2: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) statfs(&(0x7f00000001c0)='./file0\x00', 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x2) r3 = socket$inet6(0xa, 0x2, 0x0) dup3(r3, r0, 0x0) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000004, 0x8010, r2, 0x736e) 20:25:43 executing program 1: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000180)={&(0x7f0000000100)="7c004e0f7eb6f0ae50030f1c62c166400f3a0fab0a00000004dfc5c4027d3fe566470f113b660f2f785f670f2ba80e0000002599899999", 0x4, &(0x7f0000000140)="f2df590bc46125767452e7875c3051c4e1f810f9c4e2fd1c43c1c1e3ab6546d3c63e42e200c402a947cdc4a2399ae3", {[0x1]}}, &(0x7f0000000240)={&(0x7f00000001c0)="c4a10dd5961d000000c481235c1cb42667f20f12f5f3436f42a4c4017c5aff3c2ac44178511e400f13ae00000000c481fc510b", 0x0, &(0x7f0000000200)="3e410f01d845894d07c461ff123bf0f69504000000c46331782f1ac44175facb460f6f14a9f0440fb32f450fe4167600"}, 0x8, &(0x7f0000000280)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32], 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) [ 1129.900794][T17324] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 20:25:43 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x6, 0x0, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086201, &(0x7f0000000280)=0x5) ioctl$VIDIOC_G_JPEGCOMP(r3, 0x808c563d, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}, 0x1}, @in={0x2, 0x0, @empty}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}], 0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r4}) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x5c}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(0x0, 0x1, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r8 = socket$inet6(0xa, 0x80005, 0x0) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r8, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c) r9 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x0, 0x400400) r10 = gettid() syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') accept4$vsock_stream(r9, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @hyper}, 0x10, 0x80000) getgid() ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000240)) writev(r5, &(0x7f0000000080), 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) ioprio_get$pid(0x2, r10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000000000)) tkill(r10, 0x1004000000016) fgetxattr(r5, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x0, 0x0) close(r7) dup2(r9, r6) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0xbba}, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000007c0)={[{0x7, 0x3, 0x0, 0xe2fe, 0xffffffffffffff81, 0x4, 0x4, 0xffffffffffffb1b0, 0x10000, 0x0, 0x6, 0x2}, {0x1, 0x7, 0x8, 0x8, 0x0, 0x0, 0x8, 0xd3, 0x1, 0x0, 0x3f}, {0x10000, 0x3f, 0x2, 0xea7, 0x5, 0x20, 0x4, 0x1, 0x80000001, 0x0, 0x8245, 0x0, 0x2}]}) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) timer_delete(0x0) [ 1130.022011][T17324] device macsec1 entered promiscuous mode [ 1130.071146][T17324] device virt_wifi0 entered promiscuous mode 20:25:43 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0x64, 0x0) [ 1130.123699][T17324] device virt_wifi0 left promiscuous mode 20:25:43 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0x65, 0x0) 20:25:44 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0x66, 0x0) 20:25:44 executing program 1: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000180)={&(0x7f0000000100)="7c004e0f7eb6f0ae50030f1c62c166400f3a0fab0a00000004dfc5c4027d3fe566470f113b660f2f785f670f2ba80e0000002599899999", 0x4, &(0x7f0000000140)="f2df590bc46125767452e7875c3051c4e1f810f9c4e2fd1c43c1c1e3ab6546d3c63e42e200c402a947cdc4a2399ae3", {[0x1]}}, &(0x7f0000000240)={&(0x7f00000001c0)="c4a10dd5961d000000c481235c1cb42667f20f12f5f3436f42a4c4017c5aff3c2ac44178511e400f13ae00000000c481fc510b", 0x0, &(0x7f0000000200)="3e410f01d845894d07c461ff123bf0f69504000000c46331782f1ac44175facb460f6f14a9f0440fb32f450fe4167600"}, 0x8, &(0x7f0000000280)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32], 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) 20:25:44 executing program 2: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x8) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303034303030302c757365725f69643d844cb932e4600a0abd39c8737293638d2978b4b7fc8a4e90d06fa3543e83668110fdbb0da95c22d0bb7e71b7771b4bff7fc96a3cda40c4fc2a59bdf0abcbd5917e9aa4b533230c2d745da4b8fdab34895562d6d8d973296d9a2cee25029b00946ed31e2547c1f05ab6c1cb2ed3bc6e0942ef4ccefdd6c27e1f38f8f2380459fa6ee2", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESHEX]) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) statfs(&(0x7f00000001c0)='./file0\x00', 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x2) r3 = socket$inet6(0xa, 0x2, 0x0) dup3(r3, r0, 0x0) 20:25:44 executing program 5: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x82) sendfile(r1, r0, 0x0, 0xa198) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x540843, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000001580)=ANY=[], 0x119) sendfile(r3, r2, 0x0, 0xa198) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r5 = dup2(r4, r4) ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, &(0x7f0000000080)={{0xffffffffffffffff, 0x2, 0xbd, 0x1, 0x9}, 0xac, 0xffff, 'id0\x00', 'timer0\x00', 0x0, 0xb94a, 0x7, 0xffff, 0x1}) 20:25:44 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x6, 0x0, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086201, &(0x7f0000000280)=0x5) ioctl$VIDIOC_G_JPEGCOMP(r3, 0x808c563d, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}, 0x1}, @in={0x2, 0x0, @empty}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}], 0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r4}) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x5c}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(0x0, 0x1, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r8 = socket$inet6(0xa, 0x80005, 0x0) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r8, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c) r9 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x0, 0x400400) r10 = gettid() syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') accept4$vsock_stream(r9, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @hyper}, 0x10, 0x80000) getgid() ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000240)) writev(r5, &(0x7f0000000080), 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) ioprio_get$pid(0x2, r10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000000000)) tkill(r10, 0x1004000000016) fgetxattr(r5, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x0, 0x0) close(r7) dup2(r9, r6) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0xbba}, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000007c0)={[{0x7, 0x3, 0x0, 0xe2fe, 0xffffffffffffff81, 0x4, 0x4, 0xffffffffffffb1b0, 0x10000, 0x0, 0x6, 0x2}, {0x1, 0x7, 0x8, 0x8, 0x0, 0x0, 0x8, 0xd3, 0x1, 0x0, 0x3f}, {0x10000, 0x3f, 0x2, 0xea7, 0x5, 0x20, 0x4, 0x1, 0x80000001, 0x0, 0x8245, 0x0, 0x2}]}) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) timer_delete(0x0) [ 1130.934939][T17373] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 20:25:44 executing program 4: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x82) sendfile(r1, r0, 0x0, 0xa198) r2 = open(&(0x7f00000001c0)='./file1\x00', 0x402000, 0x2) sendmsg$nl_route(r1, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=@RTM_GETNSID={0x44, 0x5a, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@NETNSA_PID={0x8}, @NETNSA_FD={0x8, 0x3, r2}, @NETNSA_NSID={0x8}, @NETNSA_PID={0x8}, @NETNSA_FD={0x8}, @NETNSA_NSID={0x8, 0x1, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x20040000) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000000)={0x2, 0x1, 0xffffb97d, 0x1f, 0x1, "ea306feec11a2d10db070875072706d62608f9", 0x5, 0xe65}) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r3, r2, 0x0, 0xa198) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x80800, 0x121) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r6 = dup2(r5, r5) ioctl$EVIOCGPROP(r6, 0xc004743e, &(0x7f0000000000)=""/246) r7 = getpid() sched_setscheduler(r7, 0x5, &(0x7f00000002c0)) write$cgroup_pid(r6, &(0x7f0000000180)=r7, 0x12) r8 = dup2(r4, r4) ioctl$EVIOCGPROP(r8, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$TCFLSH(r8, 0x540b, 0x1) 20:25:44 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0x67, 0x0) [ 1131.038705][T17373] device macsec1 entered promiscuous mode [ 1131.060085][T17373] device virt_wifi0 entered promiscuous mode [ 1131.114107][T17373] device virt_wifi0 left promiscuous mode [ 1131.256943][T17396] fuse: Bad value for 'user_id' 20:25:45 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0x68, 0x0) [ 1131.724033][T17396] fuse: Bad value for 'user_id' 20:25:45 executing program 2: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) statfs(&(0x7f00000001c0)='./file0\x00', 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r3 = socket$inet6(0xa, 0x2, 0x0) dup3(r3, r0, 0x0) 20:25:45 executing program 1: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000180)={&(0x7f0000000100)="7c004e0f7eb6f0ae50030f1c62c166400f3a0fab0a00000004dfc5c4027d3fe566470f113b660f2f785f670f2ba80e0000002599899999", 0x4, &(0x7f0000000140)="f2df590bc46125767452e7875c3051c4e1f810f9c4e2fd1c43c1c1e3ab6546d3c63e42e200c402a947cdc4a2399ae3", {[0x1]}}, &(0x7f0000000240)={&(0x7f00000001c0)="c4a10dd5961d000000c481235c1cb42667f20f12f5f3436f42a4c4017c5aff3c2ac44178511e400f13ae00000000c481fc510b", 0x0, &(0x7f0000000200)="3e410f01d845894d07c461ff123bf0f69504000000c46331782f1ac44175facb460f6f14a9f0440fb32f450fe4167600"}, 0x8, &(0x7f0000000280)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32], 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) [ 1131.924535][T17419] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 1131.986945][T17419] device macsec1 entered promiscuous mode [ 1132.000928][T17419] device virt_wifi0 entered promiscuous mode [ 1132.021157][T17419] device virt_wifi0 left promiscuous mode 20:25:45 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x6, 0x0, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086201, &(0x7f0000000280)=0x5) ioctl$VIDIOC_G_JPEGCOMP(r3, 0x808c563d, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}, 0x1}, @in={0x2, 0x0, @empty}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}], 0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r4}) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x5c}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(0x0, 0x1, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r8 = socket$inet6(0xa, 0x80005, 0x0) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r8, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c) r9 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x0, 0x400400) r10 = gettid() syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') accept4$vsock_stream(r9, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @hyper}, 0x10, 0x80000) getgid() ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000240)) writev(r5, &(0x7f0000000080), 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) ioprio_get$pid(0x2, r10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000000000)) tkill(r10, 0x1004000000016) fgetxattr(r5, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x0, 0x0) close(r7) dup2(r9, r6) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0xbba}, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000007c0)={[{0x7, 0x3, 0x0, 0xe2fe, 0xffffffffffffff81, 0x4, 0x4, 0xffffffffffffb1b0, 0x10000, 0x0, 0x6, 0x2}, {0x1, 0x7, 0x8, 0x8, 0x0, 0x0, 0x8, 0xd3, 0x1, 0x0, 0x3f}, {0x10000, 0x3f, 0x2, 0xea7, 0x5, 0x20, 0x4, 0x1, 0x80000001, 0x0, 0x8245, 0x0, 0x2}]}) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) timer_delete(0x0) 20:25:45 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0x69, 0x0) 20:25:45 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0x6a, 0x0) 20:25:45 executing program 5: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x82) sendfile(r1, r0, 0x0, 0xa198) lookup_dcookie(0xfffffffffffffff9, &(0x7f0000000080)=""/165, 0xa5) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0xffff) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000001580)=ANY=[], 0x119) sendfile(r3, r2, 0x0, 0xa198) 20:25:46 executing program 2: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x200802, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000380)={'filter\x00'}, &(0x7f0000000400)=0x78) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x400000000000030, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0xfd97, 0x8, 0x4, 0x80000, 0x9, {r2, r3/1000+60000}, {0x4, 0xc, 0x0, 0x2, 0x80, 0x2, "06e6a75d"}, 0x8, 0x0, @offset=0x1ff, 0x7, 0x0, r4}) read(r5, &(0x7f0000000300)=""/97, 0x61) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC]) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) statfs(&(0x7f00000001c0)='./file0\x00', 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x2) dup3(0xffffffffffffffff, r1, 0x0) 20:25:46 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0x6b, 0x0) [ 1132.786237][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 1132.786258][ T28] audit: type=1804 audit(1590265546.111:730): pid=17457 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir984313495/syzkaller.4Sv1HN/1000/file0" dev="sda1" ino=16235 res=1 [ 1132.840493][ T28] audit: type=1804 audit(1590265546.111:731): pid=17457 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir984313495/syzkaller.4Sv1HN/1000/file0" dev="sda1" ino=16235 res=1 [ 1132.961057][T17459] fuse: Bad value for 'group_id' 20:25:46 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0x6c, 0x0) [ 1133.190577][T17459] fuse: Bad value for 'group_id' [ 1133.305240][ T28] audit: type=1804 audit(1590265546.621:732): pid=17392 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir374862090/syzkaller.5NWs5l/1098/file0" dev="sda1" ino=16381 res=1 20:25:46 executing program 4: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x82) sendfile(r1, r0, 0x0, 0xa198) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x161042, 0x3b) sendfile(r3, r2, 0x0, 0xa198) 20:25:46 executing program 1: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000180)={&(0x7f0000000100)="7c004e0f7eb6f0ae50030f1c62c166400f3a0fab0a00000004dfc5c4027d3fe566470f113b660f2f785f670f2ba80e0000002599899999", 0x4, &(0x7f0000000140)="f2df590bc46125767452e7875c3051c4e1f810f9c4e2fd1c43c1c1e3ab6546d3c63e42e200c402a947cdc4a2399ae3", {[0x1]}}, &(0x7f0000000240)={&(0x7f00000001c0)="c4a10dd5961d000000c481235c1cb42667f20f12f5f3436f42a4c4017c5aff3c2ac44178511e400f13ae00000000c481fc510b", 0x0, &(0x7f0000000200)="3e410f01d845894d07c461ff123bf0f69504000000c46331782f1ac44175facb460f6f14a9f0440fb32f450fe4167600"}, 0x8, &(0x7f0000000280)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB], 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) 20:25:46 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x6, 0x0, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086201, &(0x7f0000000280)=0x5) ioctl$VIDIOC_G_JPEGCOMP(r3, 0x808c563d, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}, 0x1}, @in={0x2, 0x0, @empty}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}], 0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r4}) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x5c}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(0x0, 0x1, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r8 = socket$inet6(0xa, 0x80005, 0x0) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r8, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c) r9 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x0, 0x400400) r10 = gettid() syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') accept4$vsock_stream(r9, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @hyper}, 0x10, 0x80000) getgid() ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000240)) writev(r5, &(0x7f0000000080), 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) ioprio_get$pid(0x2, r10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000000000)) tkill(r10, 0x1004000000016) fgetxattr(r5, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x0, 0x0) close(r7) dup2(r9, r6) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0xbba}, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000007c0)={[{0x7, 0x3, 0x0, 0xe2fe, 0xffffffffffffff81, 0x4, 0x4, 0xffffffffffffb1b0, 0x10000, 0x0, 0x6, 0x2}, {0x1, 0x7, 0x8, 0x8, 0x0, 0x0, 0x8, 0xd3, 0x1, 0x0, 0x3f}, {0x10000, 0x3f, 0x2, 0xea7, 0x5, 0x20, 0x4, 0x1, 0x80000001, 0x0, 0x8245, 0x0, 0x2}]}) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) timer_delete(0x0) 20:25:46 executing program 2: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="f900"/17, @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) statfs(&(0x7f00000001c0)='./file0\x00', 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x2) r3 = socket$inet6(0xa, 0x2, 0x0) dup3(r3, r0, 0x0) 20:25:46 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0x6d, 0x0) [ 1133.447536][ T28] audit: type=1804 audit(1590265546.771:733): pid=17453 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir984313495/syzkaller.4Sv1HN/1000/file0" dev="sda1" ino=16235 res=1 [ 1133.529792][ T28] audit: type=1804 audit(1590265546.771:734): pid=17457 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir984313495/syzkaller.4Sv1HN/1000/file0" dev="sda1" ino=16235 res=1 [ 1133.543684][T17486] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 20:25:46 executing program 5: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x80) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000002c0)=@security={'security\x00', 0xe, 0x4, 0x328, 0xffffffff, 0x0, 0x188, 0x0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, &(0x7f0000000180), {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x2, 0x0, 0x6, 0x1, 0x2, 0x6], 0x3}, {0x1, [0x1, 0x4, 0x4, 0x1, 0x6, 0x4], 0x1, 0x2}}}}, {{@ip={@loopback, @empty, 0xffffffff, 0xff, 'veth1\x00', 'vlan1\x00', {0xff}, {0xff}, 0xc, 0x2, 0x50}, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20, 'socket\x00'}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x5, 0xa2}}}, {{@ip={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0xff, 'wg1\x00', 'sit0\x00', {0xff}, {0xff}, 0x0, 0x3, 0xc}, 0x0, 0xc8, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}, {[0xfffff087, 0x4], 0x1}}, @common=@ttl={{0x28, 'ttl\x00'}, {0x3, 0xec}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x3, 0x0, "b916b4b38ce44a1e5962a5b61ea9c5dc8b39fa597e5bfa2471124d6a4766"}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x388) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x400000000000030, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @private=0xa010100}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x400000000000030, 0x0) write$binfmt_elf64(r4, &(0x7f0000000080)=ANY=[@ANYRESOCT=r2], 0x82) sendfile(r1, r0, 0x0, 0xa198) r5 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) ioctl$VIDIOC_G_JPEGCOMP(0xffffffffffffffff, 0x808c563d, &(0x7f0000000200)) r6 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000001580)=ANY=[], 0x119) creat(&(0x7f0000000000)='./file0\x00', 0x24) sendfile(r6, r5, 0x0, 0xa198) [ 1133.618731][T17488] fuse: Unknown parameter 'ù' 20:25:47 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0x6e, 0x0) [ 1133.740359][T17486] device macsec1 entered promiscuous mode [ 1133.766192][ T28] audit: type=1804 audit(1590265547.091:735): pid=17501 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir374862090/syzkaller.5NWs5l/1099/file0" dev="sda1" ino=16335 res=1 [ 1133.799404][T17486] device virt_wifi0 entered promiscuous mode [ 1133.821200][ T28] audit: type=1804 audit(1590265547.141:736): pid=17506 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir984313495/syzkaller.4Sv1HN/1001/file0" dev="sda1" ino=16224 res=1 [ 1133.855286][ T28] audit: type=1804 audit(1590265547.171:737): pid=17498 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir984313495/syzkaller.4Sv1HN/1001/file0" dev="sda1" ino=16224 res=1 [ 1133.883169][ T28] audit: type=1804 audit(1590265547.171:738): pid=17498 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir984313495/syzkaller.4Sv1HN/1001/file0" dev="sda1" ino=16224 res=1 [ 1133.904252][T17486] device virt_wifi0 left promiscuous mode [ 1133.915671][ T28] audit: type=1804 audit(1590265547.201:739): pid=17506 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir984313495/syzkaller.4Sv1HN/1001/file0" dev="sda1" ino=16224 res=1 20:25:47 executing program 5: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x82) sendfile(r1, r0, 0x0, 0xa198) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = semget(0x2, 0x1, 0x1) semop(r3, &(0x7f0000000000)=[{0x0, 0x4ea, 0x800}, {0x0, 0x3, 0x1000}, {0x5, 0x8, 0x800}, {0x4, 0x3, 0xc00}, {0x3, 0x6, 0x1000}, {0x0, 0x2, 0x800}, {0x0, 0x12, 0x1800}, {0x1, 0x7, 0x1000}], 0x8) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000001580)=ANY=[], 0x119) sendfile(r4, r2, 0x0, 0xa198) fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000080)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x6) 20:25:47 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0x6f, 0x0) [ 1134.365046][T17496] fuse: Unknown parameter 'ù' 20:25:47 executing program 4: clone(0x8000400, &(0x7f0000000080)="e77ca7b04e8bcc2b0a9decdb3572a9b4554fa80f8075708c9b2ebc38974dec423ebbd2910eb1dad716322f7ea6e5f06cc0612e7281dac6ea2a5a5127fe423af25c07e41771dfe806ab", &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000200)="eff7f55b1b4739112a11bd0798da2201cdcd94cd96f82905851c4b71d39402b3bc2e5df5bf6564a54108fa2507241d796c1598d13a53950e827f62e0abf175ebb37f5e0d0058cb3c15c964bae3b655d9ea48d366bc97c10aafc901b3374f6a17506aed850a778e1a0c441cb8587ef7c65566253f19407a0aa9887e1791e6312863ecc1f5c8ace9851177209657643a004ce6fa3b90d43c33adb979e9758df19e") r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x82) sendfile(r1, r0, 0x0, 0xa198) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r3, r2, 0x0, 0xa198) 20:25:47 executing program 1: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000180)={&(0x7f0000000100)="7c004e0f7eb6f0ae50030f1c62c166400f3a0fab0a00000004dfc5c4027d3fe566470f113b660f2f785f670f2ba80e0000002599899999", 0x4, &(0x7f0000000140)="f2df590bc46125767452e7875c3051c4e1f810f9c4e2fd1c43c1c1e3ab6546d3c63e42e200c402a947cdc4a2399ae3", {[0x1]}}, &(0x7f0000000240)={&(0x7f00000001c0)="c4a10dd5961d000000c481235c1cb42667f20f12f5f3436f42a4c4017c5aff3c2ac44178511e400f13ae00000000c481fc510b", 0x0, &(0x7f0000000200)="3e410f01d845894d07c461ff123bf0f69504000000c46331782f1ac44175facb460f6f14a9f0440fb32f450fe4167600"}, 0x8, &(0x7f0000000280)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB], 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) [ 1134.645847][T17530] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 20:25:48 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0x70, 0x0) [ 1134.847748][T17530] device macsec1 entered promiscuous mode 20:25:48 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x6, 0x0, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086201, &(0x7f0000000280)=0x5) ioctl$VIDIOC_G_JPEGCOMP(r3, 0x808c563d, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}, 0x1}, @in={0x2, 0x0, @empty}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}], 0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r4}) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x5c}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(0x0, 0x1, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r8 = socket$inet6(0xa, 0x80005, 0x0) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r8, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c) r9 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x0, 0x400400) r10 = gettid() syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') accept4$vsock_stream(r9, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @hyper}, 0x10, 0x80000) getgid() ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000240)) writev(r5, &(0x7f0000000080), 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) ioprio_get$pid(0x2, r10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000000000)) tkill(r10, 0x1004000000016) fgetxattr(r5, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x0, 0x0) close(r7) dup2(r9, r6) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0xbba}, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000007c0)={[{0x7, 0x3, 0x0, 0xe2fe, 0xffffffffffffff81, 0x4, 0x4, 0xffffffffffffb1b0, 0x10000, 0x0, 0x6, 0x2}, {0x1, 0x7, 0x8, 0x8, 0x0, 0x0, 0x8, 0xd3, 0x1, 0x0, 0x3f}, {0x10000, 0x3f, 0x2, 0xea7, 0x5, 0x20, 0x4, 0x1, 0x80000001, 0x0, 0x8245, 0x0, 0x2}]}) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) timer_delete(0x0) [ 1134.899735][T17530] device virt_wifi0 entered promiscuous mode 20:25:48 executing program 2: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) statfs(&(0x7f00000001c0)='./file0\x00', 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x400000000000030, 0x0) connect(r3, &(0x7f00000000c0)=@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, [@bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80) umount2(&(0x7f0000000080)='./file0\x00', 0x2) r4 = socket$inet6(0xa, 0x2, 0x0) dup3(r4, r0, 0x0) [ 1134.992713][T17530] device virt_wifi0 left promiscuous mode 20:25:48 executing program 5: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x82) sendfile(r1, r0, 0x0, 0xa198) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x400000000000030, 0x0) write$binfmt_elf64(r4, &(0x7f0000001580)=ANY=[], 0x119) sendfile(r3, r2, 0x0, 0xa198) 20:25:48 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0x71, 0x0) 20:25:48 executing program 4: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x82) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x400000000000030, 0x0) sendfile(r2, r0, 0x0, 0xa198) r3 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r4, r3, 0x0, 0xa198) 20:25:48 executing program 1: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000180)={&(0x7f0000000100)="7c004e0f7eb6f0ae50030f1c62c166400f3a0fab0a00000004dfc5c4027d3fe566470f113b660f2f785f670f2ba80e0000002599899999", 0x4, &(0x7f0000000140)="f2df590bc46125767452e7875c3051c4e1f810f9c4e2fd1c43c1c1e3ab6546d3c63e42e200c402a947cdc4a2399ae3", {[0x1]}}, &(0x7f0000000240)={&(0x7f00000001c0)="c4a10dd5961d000000c481235c1cb42667f20f12f5f3436f42a4c4017c5aff3c2ac44178511e400f13ae00000000c481fc510b", 0x0, &(0x7f0000000200)="3e410f01d845894d07c461ff123bf0f69504000000c46331782f1ac44175facb460f6f14a9f0440fb32f450fe4167600"}, 0x8, &(0x7f0000000280)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB], 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) 20:25:49 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0x72, 0x0) 20:25:49 executing program 2: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="66643dbed3a19df6059be7b16114e24f17a89e505f226e9bee07d813e1", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c670b9a75705f69643df53e90585394585aede8457f942b60e248a5cfbac0339aae0132cbe34dae722522671821ba4ad84d6d6d6a07652d465e", @ANYRESDEC=0x0]) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r2 = dup2(r1, r1) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$VIDIOC_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000300)={0x0, @bt={0x3, 0x3, 0x0, 0x6, 0x800, 0x5, 0xfffffffa, 0x0, 0x0, 0x3ca, 0x1, 0xff, 0x81, 0x76df, 0xb, 0xf, {0x4, 0x2}, 0x4, 0x9}}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) statfs(&(0x7f00000001c0)='./file0\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='trusted.overlay.redirect\x00', &(0x7f0000000280)='./file0\x00', 0x8, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x2) r5 = socket$inet6(0xa, 0x2, 0x0) dup3(r5, r0, 0x0) [ 1135.791937][T17573] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 20:25:49 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x6, 0x0, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086201, &(0x7f0000000280)=0x5) ioctl$VIDIOC_G_JPEGCOMP(r3, 0x808c563d, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}, 0x1}, @in={0x2, 0x0, @empty}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}], 0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r4}) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x5c}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(0x0, 0x1, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r8 = socket$inet6(0xa, 0x80005, 0x0) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r8, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c) r9 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x0, 0x400400) r10 = gettid() syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') accept4$vsock_stream(r9, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @hyper}, 0x10, 0x80000) getgid() ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000240)) writev(r5, &(0x7f0000000080), 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) ioprio_get$pid(0x2, r10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000000000)) tkill(r10, 0x1004000000016) fgetxattr(r5, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x0, 0x0) close(r7) dup2(r9, r6) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0xbba}, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000007c0)={[{0x7, 0x3, 0x0, 0xe2fe, 0xffffffffffffff81, 0x4, 0x4, 0xffffffffffffb1b0, 0x10000, 0x0, 0x6, 0x2}, {0x1, 0x7, 0x8, 0x8, 0x0, 0x0, 0x8, 0xd3, 0x1, 0x0, 0x3f}, {0x10000, 0x3f, 0x2, 0xea7, 0x5, 0x20, 0x4, 0x1, 0x80000001, 0x0, 0x8245, 0x0, 0x2}]}) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) timer_delete(0x0) 20:25:49 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0x73, 0x0) [ 1135.950977][T17573] device macsec1 entered promiscuous mode [ 1135.989023][T17573] device virt_wifi0 entered promiscuous mode 20:25:49 executing program 5: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYRES64=r1], 0x82) sendfile(r1, r0, 0x0, 0xa198) r2 = open(&(0x7f0000000000)='./file0\x00', 0x800, 0x24) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000001580)=ANY=[], 0x119) sendfile(r3, r2, 0x0, 0xa198) [ 1136.033223][T17573] device virt_wifi0 left promiscuous mode 20:25:49 executing program 4: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x82) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r3 = dup2(r2, r2) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000000)=""/246) bind$llc(r3, &(0x7f00000006c0)={0x1a, 0x30c, 0xc7, 0x6, 0xfe, 0xea, @local}, 0x10) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000700)={0x2e, 0x4, 0x0, {0x2, 0x4, 0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x2e) sendfile(r1, r0, 0x0, 0xa198) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r5, r4, 0x0, 0xa198) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r7) r8 = socket$inet_udplite(0x2, 0x2, 0x88) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(0x0) syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000080)='./file0\x00', 0x2af2, 0x8, &(0x7f00000008c0)=[{&(0x7f00000000c0)="195f14c1b395fdad4b7573cb41673e7dd3a8b2aa9c1215c3a0006d97bbb625a7934b72a3981d8b033445e05da824065c10b39212b5b64d2ab472bd2cb30127e8739d9c92a759488ccf4c410fd21362f61d70ee8ad952d6a91957ee2366498cefe23e153758b61e879312d57773be24e2033714e5622ff3f21f4631618bc874d11868863f2f1282d6dcfd11477f8f57ee6815aa6cbe240eeddf1a914918052f867caa885ee3c1cde83d6da72eaa8449d2e2dd47bc61f612d6cd162db8e3770cbc64d1a08420c41a8ae29edb9a40da67de7c0cdd", 0xd3, 0x81}, {&(0x7f0000000200)="c1f42489da211122ce1b8ff8df9345e31161d2e0d950678a3b99c3e91daedfc8450f46", 0x23, 0x3}, {&(0x7f0000000240)="9dd737853de8e131d634b8ca44cd9cd8ae7bd2c7904877fe6c5347225adcdb0d9457e3e5c3ae5bec7491749ac4ae0802ee51ee6393f7748dc2d9000f53275a1c47039a419465ad", 0x47, 0x7fffffff}, {&(0x7f00000002c0)="04abe1edde15a6b308ce7b6156a23e2260f30582c58deed614fd94a95522dfc1f50932893e4207694e16370c3069e9cc99fd2af034cdf7d640e191b941ac1f34ccef4aaae6809fdcb89ce58dc0033a781a6354b005e29cb9d34550ddc6bbc94a849a4e55e824b8fb6d53ab234da367fa2d45a0e8eb85393ee88a03036f203bf62deef0b30af3027326dd469c7cf29c70b7a68b515f171b6189e8a67bacde070c8eec5053a3576f606c15e9421bcf5addff5f7471573dc482dc9a6441d3c435cae1a68c23218e7a2cb7d3e155da431b103a10cb5fa8fb1519f16a419ade09c0b49f6d90793313383981890471", 0xec, 0x8}, {&(0x7f00000003c0)="1d4f1406e9446ca8ba5bbe9ce73cd5c5653f3b636d90cfe9b92236279b4f2154d81f7de430db772e0bf2b454e600f473198043147ea848064ced3f6bc54d4f12e7e6670ec55ecaca1fe61f36f64d6fe81ce7ce1fbfb37f2e4be90668c19c3b8bbab89401d3d50cd4179a56102234ba42d36c2c28a8b68466151f71e8d118ad24cd5ce3ddde708bbf09afd35bed4c8cd14a764eae", 0x94, 0xcc}, {&(0x7f0000000980)="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", 0x145, 0x8}, {&(0x7f0000000480)="606c9cd04e37637756bdb60428b67fcfc24241263c5fd988f4e167f204a2eb66d5c631f3157dbc28f37c6c58183cc09e414d8e90a1ba353662d3ff471bb3f343b3310eb346c7ff3732f09039e359eaa3da256f4322421c71f995f5ed6597ff0d9e4019df3d69844f93b8d49f4541a323c3178f7ea682540a832608466fbf596b768984091e850d8fd636d3caf8bd311e044feaa0882b5961237783b488507bfa604caf34e910eab114f4db1f674390716bf81c3a09469b7249a63007d140237954863c6cdb46872250a0d0a8c5dfded256144e8d148b4a2346fedd7ca688a910fbc7e48a51e71618dac3516cf1ac7d7b", 0xf0}, {&(0x7f0000000640)="44a814b5a0979926e238d291d89b67ba6c3d1aabe6333bc19dc86a07b0eef9710b1eb339765a986637dba2ba98b114a7b5e9d01f97985812cb93f4a722da9a2112ad1c48ce331e625e6e546e2879af16eaa31056f543882ceed65f7d6411049b725a35f762391f459c78477c42562baaa3b6f99bd0", 0x75, 0x20}], 0x2203010, &(0x7f0000000b00)={[{@nr_blocks={'nr_blocks', 0x3d, [0x6b, 0x39]}}, {@huge_always={'huge=always', 0x3d, '\'+'}}, {@mpol={'mpol', 0x3d, {'local', '=relative', @void}}}, {@mode={'mode', 0x3d, 0x1}}, {@mode={'mode', 0x3d, 0x3}}], [{@smackfshat={'smackfshat', 0x3d, 'lo\'ppp0vmnet0%,'}}, {@uid_gt={'uid>', r9}}, {@obj_user={'obj_user', 0x3d, '#\\'}}, {@measure='measure'}, {@euid_gt={'euid>', r7}}, {@dont_measure='dont_measure'}, {@smackfsroot={'smackfsroot'}}, {@fowner_lt={'fowner<', r9}}]}) [ 1136.213673][T17591] fuse: Bad value for 'fd' 20:25:49 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0x74, 0x0) 20:25:49 executing program 1: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000180)={&(0x7f0000000100)="7c004e0f7eb6f0ae50030f1c62c166400f3a0fab0a00000004dfc5c4027d3fe566470f113b660f2f785f670f2ba80e0000002599899999", 0x4, &(0x7f0000000140)="f2df590bc46125767452e7875c3051c4e1f810f9c4e2fd1c43c1c1e3ab6546d3c63e42e200c402a947cdc4a2399ae3", {[0x1]}}, &(0x7f0000000240)={&(0x7f00000001c0)="c4a10dd5961d000000c481235c1cb42667f20f12f5f3436f42a4c4017c5aff3c2ac44178511e400f13ae00000000c481fc510b", 0x0, &(0x7f0000000200)="3e410f01d845894d07c461ff123bf0f69504000000c46331782f1ac44175facb460f6f14a9f0440fb32f450fe4167600"}, 0x8, &(0x7f0000000280)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a5377986fc254ec2862883ce7257cd4f7ae2dcfdaef81c581d1b4223e49887ee68e87ed537d5b2e957e1fac165be3eb34c5174f6279277376cbe5d10966df793456b54921f664921e1615264cc762c189704152109b0dff9eb9ca92da7"], 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) [ 1136.676718][T17593] fuse: Bad value for 'fd' [ 1136.767761][T17625] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 20:25:50 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x6, 0x0, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086201, &(0x7f0000000280)=0x5) ioctl$VIDIOC_G_JPEGCOMP(r3, 0x808c563d, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}, 0x1}, @in={0x2, 0x0, @empty}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}], 0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r4}) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x5c}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(0x0, 0x1, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r8 = socket$inet6(0xa, 0x80005, 0x0) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r8, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c) r9 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x0, 0x400400) r10 = gettid() syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') accept4$vsock_stream(r9, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @hyper}, 0x10, 0x80000) getgid() ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000240)) writev(r5, &(0x7f0000000080), 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) ioprio_get$pid(0x2, r10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000000000)) tkill(r10, 0x1004000000016) fgetxattr(r5, &(0x7f0000000840)=ANY=[@ANYBLOB="a50500714f7f7100d340200007d2644a6dc2ebdbd5db1f0867e0c40e01380ec99c6dcf2b0bef2533fdea38cd4ecd9f1d377a4a4aff9ec836959ff1a0191bd4bad0b8fe12bb4d78471a2f990c3776675c0dcdab4b39f584bca23a7a2fc19b27bc9b71e8ae59f42a718a3dec8d4374db63d9d795b0ff05c117aa5702290b3103bc28aec5801bb39ebdd5c3be0000000080000000e59b3dbaf1eb15fced2d000000000000000000000040000000000d2e45dfffb6c050f46226daadc63659168a50dda734148a8fe4d5b99b43e2edb3fe3e754d26bc8c16c313ea9c5bbd35d600702cfce25becac92fde18fa3701cb6b04eb84375191fd8b6ed74e535c990d82524dd5f8997e0930060bda93c57d6a9597a9ba79eb57071b5a49b61ec0fc5fee99c8d4984c400c7fef3cbec8abd2f191c94c41ae90c000000000000cf5406b34abd6f3ae8dc2fea6e5ed50649b862a7f665f095e1fd41b083596db8162f405d241c5bf97c009e6a702ce6408bc1cbd4e0c86692a484a9ad8959fb62f028a0dd925761dc08f1ae0ec4888ac7a64e36bd4093e555efee1780107e0e7039b3d3fc0290f93b7222de47e4a1e9f757ac6c5b9dc9ba4b2ebbc92a6e6c3f27f1b797634d06000000d8836651ba9beb008377323cdd69e464db54236c5663421c20f1142589c9b30fb74b378300000000000000000000f9d7ec43bed2988d5dd4fc8dc9841bfbf39d6968a1e41654fa965fe3e38cabc0e4fd7b1f04c0f69baae5767ece069beaf6dc87c4a0fd11d838c0dac7f5457f7531442cb4e1c48638768969c107039ce237c49bf5ca2862750ea66d48f1f2785cb81ec94a1f57dbbf9608b016decfd66f2d94b381c8ffc593a993d6861deca12cda5faf0ff4cd169ae7c52e2f872e1cc8488f6043c528f40c66c42c754e70dc9817c930f52e2fcf1f7b7c25f77ab96fc06baeec662d46ab333610c123394df2b4a9a57e13ec4dd6115488719f6e8384f25a97ee11e3a44ff524185bd4084146507c2735fdf427dd60220a66ebb5ac78ffe5646cf149a16fe3e5e1cba005ab2954d8c3f8ade1ddf979dd99ae3326b4383ea8cc41dfa1619df8bdbb186849df5891cb4d70000000001c9d85747b4617e35bfad5bbe3003cbfaa3eaa7e68ab928032a1338613f3ddb320f74a9a166d9075b6432401938c33c7f13db04c3599e7ced7b59f5f9f821d06889346b3a982253f3523ece1c9a1517b455206ad6f65aa5aa3f324e9b6d090f2d67e7452c450eceda06fd77a3dd2e085541caa961529f246a2d344b1e9c01b0efb78179a28042c79bc26f71f3766f745ecad7ba420b2556ddcf29d01626288174d54b0ef8cac5e2e33b3fa2c7782a66b2a6ce0a1c668f86d6235782e8b8a5c201e1154ef4f37657e9cc8d616c2bd8d9dba80f7048c93961619459863a05cb640b1b17ed290ec"], 0x0, 0x0) close(r7) dup2(r9, r6) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0xbba}, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000007c0)={[{0x7, 0x3, 0x0, 0xe2fe, 0xffffffffffffff81, 0x4, 0x4, 0xffffffffffffb1b0, 0x10000, 0x0, 0x6, 0x2}, {0x1, 0x7, 0x8, 0x8, 0x0, 0x0, 0x8, 0xd3, 0x1, 0x0, 0x3f}, {0x10000, 0x3f, 0x2, 0xea7, 0x5, 0x20, 0x4, 0x1, 0x80000001, 0x0, 0x8245, 0x0, 0x2}]}) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) timer_delete(0x0) 20:25:50 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0x75, 0x0) [ 1136.913954][T17625] device macsec1 entered promiscuous mode [ 1136.925584][T17625] device virt_wifi0 entered promiscuous mode 20:25:50 executing program 2: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x400000000000030, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYRESDEC, @ANYRESDEC=r1, @ANYRESHEX=r1, @ANYRESDEC=0x0]) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) statfs(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$nfs(&(0x7f0000000040)='nfs\x00', &(0x7f00000000c0)='./file0\x00', 0x4, 0x1, &(0x7f0000000100)=[{&(0x7f0000000300)="3ccb7903135d3e4c23751303678dd17b021d8def0a149acab9aa5a31f040ceef7f1d0480ffb6432755a2a5fd91f17d3e02292481b2c2ea0b7f4b41e5099ee773634d544c3fefe20225ce9e533313c665a726b09f791ab6baf85b705ec536e77f03c15bad30e25bf7e2297320c826314cb07c1272ca785e9dc72e7a156421c5414d9202fb8c11c372312887560190393b42ad867bf1ef7f7defc8db7a9ac1091d8034fb47fc18bb", 0xa7, 0x7}], 0x3010, &(0x7f0000000280)='fuse\x00') umount2(&(0x7f0000000080)='./file0\x00', 0x2) r4 = socket$inet6(0xa, 0x2, 0x0) dup3(r4, r0, 0x0) [ 1136.988591][T17625] device virt_wifi0 left promiscuous mode [ 1137.134240][T17638] fuse: Bad value for 'fd' 20:25:50 executing program 5: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x82) sendfile(r1, r0, 0x0, 0xa198) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000001580)=ANY=[], 0x119) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r5 = dup2(r4, r4) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10) connect$inet(r6, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x400000000000030, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r8 = dup2(r7, r7) ioctl$EVIOCGPROP(r8, 0xc004743e, &(0x7f0000000000)=""/246) io_submit(0x0, 0x0, &(0x7f0000001440)) ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f0000000000)=""/246) connect$l2tp6(r5, &(0x7f0000000000)={0xa, 0x0, 0xffff, @ipv4={[], [], @remote}, 0x5, 0x4}, 0x20) sendfile(r3, r2, 0x0, 0xa198) 20:25:50 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0x76, 0x0) [ 1137.522264][T17650] fuse: Bad value for 'fd' 20:25:51 executing program 2: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$UI_GET_VERSION(r2, 0x8004552d, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) statfs(&(0x7f00000001c0)='./file0\x00', 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x2) r3 = socket$inet6(0xa, 0x2, 0x0) dup3(r3, r0, 0x0) 20:25:51 executing program 1: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000180)={&(0x7f0000000100)="7c004e0f7eb6f0ae50030f1c62c166400f3a0fab0a00000004dfc5c4027d3fe566470f113b660f2f785f670f2ba80e0000002599899999", 0x4, &(0x7f0000000140)="f2df590bc46125767452e7875c3051c4e1f810f9c4e2fd1c43c1c1e3ab6546d3c63e42e200c402a947cdc4a2399ae3", {[0x1]}}, &(0x7f0000000240)={&(0x7f00000001c0)="c4a10dd5961d000000c481235c1cb42667f20f12f5f3436f42a4c4017c5aff3c2ac44178511e400f13ae00000000c481fc510b", 0x0, &(0x7f0000000200)="3e410f01d845894d07c461ff123bf0f69504000000c46331782f1ac44175facb460f6f14a9f0440fb32f450fe4167600"}, 0x8, &(0x7f0000000280)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a5377986fc254ec2862883ce7257cd4f7ae2dcfdaef81c581d1b4223e49887ee68e87ed537d5b2e957e1fac165be3eb34c5174f6279277376cbe5d10966df793456b54921f664921e1615264cc762c189704152109b0dff9eb9ca92da7"], 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) 20:25:51 executing program 4: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x82) sendfile(r1, r0, 0x0, 0xa198) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x40000, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f0000000000)=""/16) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r5 = dup2(r4, r4) ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f0000000000)=""/246) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000000)=""/246) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000200)=0x25b, 0x4) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0xe, &(0x7f0000000080)={r8}, &(0x7f00000000c0)=0xfe42) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000080)={r8, @in={{0x2, 0x4e24, @private=0xa010100}}, 0x7ff, 0x7, 0x8000, 0x1, 0xd9, 0x40, 0x7f}, &(0x7f0000000140)=0x9c) sendfile(r3, r2, 0x0, 0xa198) [ 1137.881616][T17660] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 1137.962822][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 1137.962843][ T28] audit: type=1804 audit(1590265551.282:764): pid=17669 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir374862090/syzkaller.5NWs5l/1103/file0" dev="sda1" ino=16216 res=1 20:25:51 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0x77, 0x0) [ 1138.039392][T17660] device macsec1 entered promiscuous mode [ 1138.049712][ T28] audit: type=1804 audit(1590265551.332:765): pid=17669 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir374862090/syzkaller.5NWs5l/1103/file0" dev="sda1" ino=16216 res=1 [ 1138.086757][T17660] device virt_wifi0 entered promiscuous mode [ 1138.149025][T17660] device virt_wifi0 left promiscuous mode 20:25:51 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x6, 0x0, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086201, &(0x7f0000000280)=0x5) ioctl$VIDIOC_G_JPEGCOMP(r3, 0x808c563d, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}, 0x1}, @in={0x2, 0x0, @empty}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}], 0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r4}) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x5c}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(0x0, 0x1, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r8 = socket$inet6(0xa, 0x80005, 0x0) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r8, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c) r9 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x0, 0x400400) r10 = gettid() syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') accept4$vsock_stream(r9, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @hyper}, 0x10, 0x80000) getgid() ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000240)) writev(r5, &(0x7f0000000080), 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) ioprio_get$pid(0x2, r10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000000000)) tkill(r10, 0x1004000000016) fgetxattr(r5, &(0x7f0000000840)=ANY=[@ANYBLOB="a50500714f7f7100d340200007d2644a6dc2ebdbd5db1f0867e0c40e01380ec99c6dcf2b0bef2533fdea38cd4ecd9f1d377a4a4aff9ec836959ff1a0191bd4bad0b8fe12bb4d78471a2f990c3776675c0dcdab4b39f584bca23a7a2fc19b27bc9b71e8ae59f42a718a3dec8d4374db63d9d795b0ff05c117aa5702290b3103bc28aec5801bb39ebdd5c3be0000000080000000e59b3dbaf1eb15fced2d000000000000000000000040000000000d2e45dfffb6c050f46226daadc63659168a50dda734148a8fe4d5b99b43e2edb3fe3e754d26bc8c16c313ea9c5bbd35d600702cfce25becac92fde18fa3701cb6b04eb84375191fd8b6ed74e535c990d82524dd5f8997e0930060bda93c57d6a9597a9ba79eb57071b5a49b61ec0fc5fee99c8d4984c400c7fef3cbec8abd2f191c94c41ae90c000000000000cf5406b34abd6f3ae8dc2fea6e5ed50649b862a7f665f095e1fd41b083596db8162f405d241c5bf97c009e6a702ce6408bc1cbd4e0c86692a484a9ad8959fb62f028a0dd925761dc08f1ae0ec4888ac7a64e36bd4093e555efee1780107e0e7039b3d3fc0290f93b7222de47e4a1e9f757ac6c5b9dc9ba4b2ebbc92a6e6c3f27f1b797634d06000000d8836651ba9beb008377323cdd69e464db54236c5663421c20f1142589c9b30fb74b378300000000000000000000f9d7ec43bed2988d5dd4fc8dc9841bfbf39d6968a1e41654fa965fe3e38cabc0e4fd7b1f04c0f69baae5767ece069beaf6dc87c4a0fd11d838c0dac7f5457f7531442cb4e1c48638768969c107039ce237c49bf5ca2862750ea66d48f1f2785cb81ec94a1f57dbbf9608b016decfd66f2d94b381c8ffc593a993d6861deca12cda5faf0ff4cd169ae7c52e2f872e1cc8488f6043c528f40c66c42c754e70dc9817c930f52e2fcf1f7b7c25f77ab96fc06baeec662d46ab333610c123394df2b4a9a57e13ec4dd6115488719f6e8384f25a97ee11e3a44ff524185bd4084146507c2735fdf427dd60220a66ebb5ac78ffe5646cf149a16fe3e5e1cba005ab2954d8c3f8ade1ddf979dd99ae3326b4383ea8cc41dfa1619df8bdbb186849df5891cb4d70000000001c9d85747b4617e35bfad5bbe3003cbfaa3eaa7e68ab928032a1338613f3ddb320f74a9a166d9075b6432401938c33c7f13db04c3599e7ced7b59f5f9f821d06889346b3a982253f3523ece1c9a1517b455206ad6f65aa5aa3f324e9b6d090f2d67e7452c450eceda06fd77a3dd2e085541caa961529f246a2d344b1e9c01b0efb78179a28042c79bc26f71f3766f745ecad7ba420b2556ddcf29d01626288174d54b0ef8cac5e2e33b3fa2c7782a66b2a6ce0a1c668f86d6235782e8b8a5c201e1154ef4f37657e9cc8d616c2bd8d9dba80f7048c93961619459863a05cb640b1b17ed290ec"], 0x0, 0x0) close(r7) dup2(r9, r6) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0xbba}, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000007c0)={[{0x7, 0x3, 0x0, 0xe2fe, 0xffffffffffffff81, 0x4, 0x4, 0xffffffffffffb1b0, 0x10000, 0x0, 0x6, 0x2}, {0x1, 0x7, 0x8, 0x8, 0x0, 0x0, 0x8, 0xd3, 0x1, 0x0, 0x3f}, {0x10000, 0x3f, 0x2, 0xea7, 0x5, 0x20, 0x4, 0x1, 0x80000001, 0x0, 0x8245, 0x0, 0x2}]}) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) timer_delete(0x0) 20:25:51 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0x78, 0x0) [ 1138.700968][ T28] audit: type=1804 audit(1590265552.022:766): pid=17687 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir374862090/syzkaller.5NWs5l/1103/file0" dev="sda1" ino=16216 res=1 20:25:52 executing program 1: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000180)={&(0x7f0000000100)="7c004e0f7eb6f0ae50030f1c62c166400f3a0fab0a00000004dfc5c4027d3fe566470f113b660f2f785f670f2ba80e0000002599899999", 0x4, &(0x7f0000000140)="f2df590bc46125767452e7875c3051c4e1f810f9c4e2fd1c43c1c1e3ab6546d3c63e42e200c402a947cdc4a2399ae3", {[0x1]}}, &(0x7f0000000240)={&(0x7f00000001c0)="c4a10dd5961d000000c481235c1cb42667f20f12f5f3436f42a4c4017c5aff3c2ac44178511e400f13ae00000000c481fc510b", 0x0, &(0x7f0000000200)="3e410f01d845894d07c461ff123bf0f69504000000c46331782f1ac44175facb460f6f14a9f0440fb32f450fe4167600"}, 0x8, &(0x7f0000000280)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a5377986fc254ec2862883ce7257cd4f7ae2dcfdaef81c581d1b4223e49887ee68e87ed537d5b2e957e1fac165be3eb34c5174f6279277376cbe5d10966df793456b54921f664921e1615264cc762c189704152109b0dff9eb9ca92da7"], 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) [ 1138.803471][ T28] audit: type=1804 audit(1590265552.052:767): pid=17696 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir374862090/syzkaller.5NWs5l/1103/file0" dev="sda1" ino=16216 res=1 20:25:52 executing program 2: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) statfs(&(0x7f00000001c0)='./file0\x00', 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x2) socket$l2tp(0x2, 0x2, 0x73) r3 = socket$inet6(0xa, 0x2, 0x0) dup3(r3, r0, 0x0) 20:25:52 executing program 4: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x82) sendfile(r1, r0, 0x0, 0xa198) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r2, r2, 0x0, 0xa195) 20:25:52 executing program 5: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x82) sendfile(r1, r0, 0x0, 0xa198) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x400000000000030, 0x0) write$binfmt_elf64(r4, &(0x7f0000000200)=ANY=[@ANYRESDEC=r2], 0x119) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x480, 0x0) write$P9_RXATTRCREATE(r5, &(0x7f0000000080)={0x7, 0x21, 0x1}, 0x7) sendfile(r3, r2, 0x0, 0xa198) [ 1138.860048][ T28] audit: type=1804 audit(1590265552.092:768): pid=17704 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir984313495/syzkaller.4Sv1HN/1005/file0" dev="sda1" ino=16218 res=1 20:25:52 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0x79, 0x0) [ 1138.946255][T17709] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 1138.969833][ T28] audit: type=1804 audit(1590265552.092:769): pid=17645 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir984313495/syzkaller.4Sv1HN/1005/file0" dev="sda1" ino=16218 res=1 [ 1139.036736][T17709] device macsec1 entered promiscuous mode [ 1139.057428][T17709] device virt_wifi0 entered promiscuous mode [ 1139.116600][T17709] device virt_wifi0 left promiscuous mode [ 1139.121999][ T28] audit: type=1804 audit(1590265552.442:770): pid=17724 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir984313495/syzkaller.4Sv1HN/1006/file0" dev="sda1" ino=16264 res=1 [ 1139.264037][ T28] audit: type=1804 audit(1590265552.482:771): pid=17723 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir374862090/syzkaller.5NWs5l/1104/file0" dev="sda1" ino=16258 res=1 [ 1139.524239][ T28] audit: type=1804 audit(1590265552.482:772): pid=17724 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir984313495/syzkaller.4Sv1HN/1006/file0" dev="sda1" ino=16264 res=1 [ 1139.757767][ T28] audit: type=1804 audit(1590265552.482:773): pid=17723 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir374862090/syzkaller.5NWs5l/1104/file0" dev="sda1" ino=16258 res=1 20:25:53 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0x7a, 0x0) 20:25:53 executing program 1: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000180)={&(0x7f0000000100)="7c004e0f7eb6f0ae50030f1c62c166400f3a0fab0a00000004dfc5c4027d3fe566470f113b660f2f785f670f2ba80e0000002599899999", 0x4, &(0x7f0000000140)="f2df590bc46125767452e7875c3051c4e1f810f9c4e2fd1c43c1c1e3ab6546d3c63e42e200c402a947cdc4a2399ae3", {[0x1]}}, &(0x7f0000000240)={&(0x7f00000001c0)="c4a10dd5961d000000c481235c1cb42667f20f12f5f3436f42a4c4017c5aff3c2ac44178511e400f13ae00000000c481fc510b", 0x0, &(0x7f0000000200)="3e410f01d845894d07c461ff123bf0f69504000000c46331782f1ac44175facb460f6f14a9f0440fb32f450fe4167600"}, 0x8, &(0x7f0000000280)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a5377986fc254ec2862883ce7257cd4f7ae2dcfdaef81c581d1b4223e49887ee68e87ed537d5b2e957e1fac165be3eb34c5174f6279277376cbe5d10966df793456b54921f664921e1615264cc762c189704152109b0dff9eb9ca92da732cc5b46ffffff7f025485dc560b67fa9950386e7d44374265b739aa0ef8918e45feb997445e598790400e81a0a90106099ffc406106"], 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) 20:25:53 executing program 2: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="66643d2d0f89e9b246e8a5a49ecd589a0ce08f7a844e8f2a0edc5db30b346cd47a00000000000100011e560064b56164ec54578b461591ff74aac9e47cf0cf46b3f2a7a9622f031e6829679718ec35b26c7b1d31e6c3041b7253a8dea5b49bc825d204d6336324f6a9a60af7a3bf1fb66b643d7a00"/130, @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x400000000000030, 0x0) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000040)=0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) statfs(&(0x7f00000001c0)='./file0\x00', 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x2) r4 = socket$inet6(0xa, 0x2, 0x0) dup3(r4, r0, 0x0) 20:25:53 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x6, 0x0, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086201, &(0x7f0000000280)=0x5) ioctl$VIDIOC_G_JPEGCOMP(r3, 0x808c563d, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}, 0x1}, @in={0x2, 0x0, @empty}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}], 0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r4}) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x5c}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(0x0, 0x1, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r8 = socket$inet6(0xa, 0x80005, 0x0) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r8, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c) r9 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x0, 0x400400) r10 = gettid() syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') accept4$vsock_stream(r9, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @hyper}, 0x10, 0x80000) getgid() ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000240)) writev(r5, &(0x7f0000000080), 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) ioprio_get$pid(0x2, r10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000000000)) tkill(r10, 0x1004000000016) fgetxattr(r5, &(0x7f0000000840)=ANY=[@ANYBLOB="a50500714f7f7100d340200007d2644a6dc2ebdbd5db1f0867e0c40e01380ec99c6dcf2b0bef2533fdea38cd4ecd9f1d377a4a4aff9ec836959ff1a0191bd4bad0b8fe12bb4d78471a2f990c3776675c0dcdab4b39f584bca23a7a2fc19b27bc9b71e8ae59f42a718a3dec8d4374db63d9d795b0ff05c117aa5702290b3103bc28aec5801bb39ebdd5c3be0000000080000000e59b3dbaf1eb15fced2d000000000000000000000040000000000d2e45dfffb6c050f46226daadc63659168a50dda734148a8fe4d5b99b43e2edb3fe3e754d26bc8c16c313ea9c5bbd35d600702cfce25becac92fde18fa3701cb6b04eb84375191fd8b6ed74e535c990d82524dd5f8997e0930060bda93c57d6a9597a9ba79eb57071b5a49b61ec0fc5fee99c8d4984c400c7fef3cbec8abd2f191c94c41ae90c000000000000cf5406b34abd6f3ae8dc2fea6e5ed50649b862a7f665f095e1fd41b083596db8162f405d241c5bf97c009e6a702ce6408bc1cbd4e0c86692a484a9ad8959fb62f028a0dd925761dc08f1ae0ec4888ac7a64e36bd4093e555efee1780107e0e7039b3d3fc0290f93b7222de47e4a1e9f757ac6c5b9dc9ba4b2ebbc92a6e6c3f27f1b797634d06000000d8836651ba9beb008377323cdd69e464db54236c5663421c20f1142589c9b30fb74b378300000000000000000000f9d7ec43bed2988d5dd4fc8dc9841bfbf39d6968a1e41654fa965fe3e38cabc0e4fd7b1f04c0f69baae5767ece069beaf6dc87c4a0fd11d838c0dac7f5457f7531442cb4e1c48638768969c107039ce237c49bf5ca2862750ea66d48f1f2785cb81ec94a1f57dbbf9608b016decfd66f2d94b381c8ffc593a993d6861deca12cda5faf0ff4cd169ae7c52e2f872e1cc8488f6043c528f40c66c42c754e70dc9817c930f52e2fcf1f7b7c25f77ab96fc06baeec662d46ab333610c123394df2b4a9a57e13ec4dd6115488719f6e8384f25a97ee11e3a44ff524185bd4084146507c2735fdf427dd60220a66ebb5ac78ffe5646cf149a16fe3e5e1cba005ab2954d8c3f8ade1ddf979dd99ae3326b4383ea8cc41dfa1619df8bdbb186849df5891cb4d70000000001c9d85747b4617e35bfad5bbe3003cbfaa3eaa7e68ab928032a1338613f3ddb320f74a9a166d9075b6432401938c33c7f13db04c3599e7ced7b59f5f9f821d06889346b3a982253f3523ece1c9a1517b455206ad6f65aa5aa3f324e9b6d090f2d67e7452c450eceda06fd77a3dd2e085541caa961529f246a2d344b1e9c01b0efb78179a28042c79bc26f71f3766f745ecad7ba420b2556ddcf29d01626288174d54b0ef8cac5e2e33b3fa2c7782a66b2a6ce0a1c668f86d6235782e8b8a5c201e1154ef4f37657e9cc8d616c2bd8d9dba80f7048c93961619459863a05cb640b1b17ed290ec"], 0x0, 0x0) close(r7) dup2(r9, r6) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0xbba}, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000007c0)={[{0x7, 0x3, 0x0, 0xe2fe, 0xffffffffffffff81, 0x4, 0x4, 0xffffffffffffb1b0, 0x10000, 0x0, 0x6, 0x2}, {0x1, 0x7, 0x8, 0x8, 0x0, 0x0, 0x8, 0xd3, 0x1, 0x0, 0x3f}, {0x10000, 0x3f, 0x2, 0xea7, 0x5, 0x20, 0x4, 0x1, 0x80000001, 0x0, 0x8245, 0x0, 0x2}]}) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) timer_delete(0x0) 20:25:53 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$VFIO_IOMMU_GET_INFO(r1, 0x3b70, &(0x7f0000000000)={0x18, 0x0, 0x0, 0xef0}) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r3, &(0x7f0000000480)=ANY=[], 0x82) sendfile(r3, r2, 0x0, 0xa198) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r5, r4, 0x0, 0xa198) [ 1140.010340][T17739] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 1140.112296][T17739] device macsec1 entered promiscuous mode [ 1140.123085][T17739] device virt_wifi0 entered promiscuous mode [ 1140.149429][T17739] device virt_wifi0 left promiscuous mode [ 1140.283969][T17755] fuse: Bad value for 'fd' 20:25:53 executing program 5: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x80000) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000004c0)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r3, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x5c, r3, 0x100, 0x70bd26, 0x5c4, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x5c}}, 0x20000000) sendmsg$NLBL_CALIPSO_C_LIST(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r3, 0x10, 0x70bd26, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x82) sendfile(r1, r0, 0x0, 0xa198) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000001580)=ANY=[], 0x119) sendfile(r5, r4, 0x0, 0xa198) 20:25:53 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0x7b, 0x0) [ 1140.797043][T17758] fuse: Bad value for 'fd' 20:25:54 executing program 1: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000180)={&(0x7f0000000100)="7c004e0f7eb6f0ae50030f1c62c166400f3a0fab0a00000004dfc5c4027d3fe566470f113b660f2f785f670f2ba80e0000002599899999", 0x4, &(0x7f0000000140)="f2df590bc46125767452e7875c3051c4e1f810f9c4e2fd1c43c1c1e3ab6546d3c63e42e200c402a947cdc4a2399ae3", {[0x1]}}, &(0x7f0000000240)={&(0x7f00000001c0)="c4a10dd5961d000000c481235c1cb42667f20f12f5f3436f42a4c4017c5aff3c2ac44178511e400f13ae00000000c481fc510b", 0x0, &(0x7f0000000200)="3e410f01d845894d07c461ff123bf0f69504000000c46331782f1ac44175facb460f6f14a9f0440fb32f450fe4167600"}, 0x8, &(0x7f0000000280)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a5377986fc254ec2862883ce7257cd4f7ae2dcfdaef81c581d1b4223e49887ee68e87ed537d5b2e957e1fac165be3eb34c5174f6279277376cbe5d10966df793456b54921f664921e1615264cc762c189704152109b0dff9eb9ca92da732cc5b46ffffff7f025485dc560b67fa9950386e7d44374265b739aa0ef8918e45feb997445e598790400e81a0a90106099ffc406106"], 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) 20:25:54 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0x7c, 0x0) 20:25:54 executing program 2: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="945f64011d", @ANYRESDEC=0x0]) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) statfs(&(0x7f00000001c0)='./file0\x00', 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x2) r3 = socket$inet6(0xa, 0x2, 0x0) rmdir(&(0x7f0000000040)='./file0\x00') lsetxattr$trusted_overlay_origin(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.origin\x00', &(0x7f0000000280)='y\x00', 0x2, 0x2) dup3(r3, r0, 0x0) 20:25:54 executing program 4: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r2 = dup2(r1, r1) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000000)=""/246) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x7, &(0x7f0000000340)=ANY=[@ANYBLOB="403e04000800000095000000000000008500000052000000950000000000000065b680000100000018150000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\b'], &(0x7f0000000380)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x1, [], 0x0, 0x7, r2, 0x8, &(0x7f00000003c0)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000400)={0x4, 0xc, 0x8, 0xfffffffb}, 0x10, 0xffffffffffffffff}, 0x78) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x10, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}, 0x1, 0xc00000000000000}, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f0000000000)={@ipv4={[], [], @broadcast}, r5}, 0x14) r6 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r6, &(0x7f0000000480)=ANY=[], 0x82) setxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='trusted.overlay.redirect\x00', &(0x7f0000000300)='./file0\x00', 0x8, 0x2) sendfile(r6, r0, 0x0, 0xa198) r7 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r8 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r8, r7, 0x0, 0xa198) syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x3ff, 0x80) [ 1141.094871][T17782] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 1141.260653][T17782] device macsec1 entered promiscuous mode 20:25:54 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0x7d, 0x0) [ 1141.309792][T17782] device virt_wifi0 entered promiscuous mode 20:25:54 executing program 5: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x82) recvmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/39, 0x27}, {&(0x7f0000000080)=""/154, 0x9a}, {&(0x7f0000000140)=""/8, 0x8}, {&(0x7f0000000200)=""/86, 0x56}], 0x4, &(0x7f0000000280)=""/48, 0x30}, 0x42) sendfile(r1, r0, 0x0, 0xa198) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000001580)=ANY=[], 0x119) sendfile(r3, r2, 0x0, 0xa198) [ 1141.374852][T17782] device virt_wifi0 left promiscuous mode [ 1141.496281][T17796] fuse: Bad value for 'fd' 20:25:54 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x6, 0x0, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086201, &(0x7f0000000280)=0x5) ioctl$VIDIOC_G_JPEGCOMP(r3, 0x808c563d, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}, 0x1}, @in={0x2, 0x0, @empty}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}], 0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r4}) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x5c}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(0x0, 0x1, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r8 = socket$inet6(0xa, 0x80005, 0x0) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r8, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c) r9 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x0, 0x400400) r10 = gettid() syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') accept4$vsock_stream(r9, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @hyper}, 0x10, 0x80000) getgid() ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000240)) writev(r5, &(0x7f0000000080), 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) ioprio_get$pid(0x2, r10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000000000)) tkill(r10, 0x1004000000016) fgetxattr(r5, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x0, 0x0) close(r7) dup2(r9, r6) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0xbba}, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000007c0)={[{0x7, 0x3, 0x0, 0xe2fe, 0xffffffffffffff81, 0x4, 0x4, 0xffffffffffffb1b0, 0x10000, 0x0, 0x6, 0x2}, {0x1, 0x7, 0x8, 0x8, 0x0, 0x0, 0x8, 0xd3, 0x1, 0x0, 0x3f}, {0x10000, 0x3f, 0x2, 0xea7, 0x5, 0x20, 0x4, 0x1, 0x80000001, 0x0, 0x8245, 0x0, 0x2}]}) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) timer_delete(0x0) 20:25:55 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0x7e, 0x0) [ 1141.917886][T17800] fuse: Bad value for 'user_id' 20:25:55 executing program 1: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000180)={&(0x7f0000000100)="7c004e0f7eb6f0ae50030f1c62c166400f3a0fab0a00000004dfc5c4027d3fe566470f113b660f2f785f670f2ba80e0000002599899999", 0x4, &(0x7f0000000140)="f2df590bc46125767452e7875c3051c4e1f810f9c4e2fd1c43c1c1e3ab6546d3c63e42e200c402a947cdc4a2399ae3", {[0x1]}}, &(0x7f0000000240)={&(0x7f00000001c0)="c4a10dd5961d000000c481235c1cb42667f20f12f5f3436f42a4c4017c5aff3c2ac44178511e400f13ae00000000c481fc510b", 0x0, &(0x7f0000000200)="3e410f01d845894d07c461ff123bf0f69504000000c46331782f1ac44175facb460f6f14a9f0440fb32f450fe4167600"}, 0x8, &(0x7f0000000280)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a5377986fc254ec2862883ce7257cd4f7ae2dcfdaef81c581d1b4223e49887ee68e87ed537d5b2e957e1fac165be3eb34c5174f6279277376cbe5d10966df793456b54921f664921e1615264cc762c189704152109b0dff9eb9ca92da732cc5b46ffffff7f025485dc560b67fa9950386e7d44374265b739aa0ef8918e45feb997445e598790400e81a0a90106099ffc406106"], 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) 20:25:55 executing program 2: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) statfs(&(0x7f00000001c0)='./file0\x00', 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x2) r3 = socket$inet6(0xa, 0x2, 0x0) dup3(r3, r0, 0x0) sendmsg$nl_netfilter(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)={0x118, 0xc, 0x5, 0x102, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x5}, [@generic="2deac87c0041ef0f", @nested={0xd8, 0x6d, 0x0, 0x1, [@generic="09b82f3acdefbba873c87e6194601713af24210e4221bd5df9980a62b6f55584b4cf1e4e02dfbb4be1807e9d2a874c70885563431b49e73b02280239fd1de25df947599c7021ff05016fbc", @generic="a26570cd4d4fe83b99715c58f86b56d5929b00c5017370412f94827f53ec452e9582203a01bceb1f0e3f7e1f4ede7aad542df8800a22028b4a89f258ce6b1006ac189af935b65bbd60889452d2a1fc96146523ab96303edac940397c467123e7009e894bdf793bff7e771210493d3f16355ec9304e3bff4651f024dafad2f25565cf51c12592488c83"]}, @nested={0x23, 0x1f, 0x0, 0x1, [@generic="82a07a9e59d580d22f3eb9000d5330e18c9cd6c207803f586ab476e6aa2403"]}]}, 0x118}, 0x1, 0x0, 0x0, 0x8014}, 0x1000) 20:25:55 executing program 4: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x82) sendfile(r1, r0, 0x0, 0xa198) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r3, r2, 0x0, 0xa198) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000000)={0x3, r3}) [ 1142.198683][T17834] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 20:25:55 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0x82, 0x0) [ 1142.351405][T17834] device macsec1 entered promiscuous mode [ 1142.386803][T17834] device virt_wifi0 entered promiscuous mode [ 1142.441780][T17834] device virt_wifi0 left promiscuous mode 20:25:55 executing program 5: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x82) sendfile(r1, r0, 0x0, 0xa198) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x10) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000001580)=ANY=[], 0x119) sendfile(r3, r2, 0x0, 0xa198) 20:25:55 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x6, 0x0, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086201, &(0x7f0000000280)=0x5) ioctl$VIDIOC_G_JPEGCOMP(r3, 0x808c563d, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}, 0x1}, @in={0x2, 0x0, @empty}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}], 0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r4}) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x5c}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(0x0, 0x1, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r8 = socket$inet6(0xa, 0x80005, 0x0) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r8, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c) r9 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x0, 0x400400) r10 = gettid() syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') accept4$vsock_stream(r9, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @hyper}, 0x10, 0x80000) getgid() ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000240)) writev(r5, &(0x7f0000000080), 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) ioprio_get$pid(0x2, r10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000000000)) tkill(r10, 0x1004000000016) fgetxattr(r5, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x0, 0x0) close(r7) dup2(r9, r6) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0xbba}, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000007c0)={[{0x7, 0x3, 0x0, 0xe2fe, 0xffffffffffffff81, 0x4, 0x4, 0xffffffffffffb1b0, 0x10000, 0x0, 0x6, 0x2}, {0x1, 0x7, 0x8, 0x8, 0x0, 0x0, 0x8, 0xd3, 0x1, 0x0, 0x3f}, {0x10000, 0x3f, 0x2, 0xea7, 0x5, 0x20, 0x4, 0x1, 0x80000001, 0x0, 0x8245, 0x0, 0x2}]}) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) timer_delete(0x0) 20:25:56 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0x83, 0x0) 20:25:56 executing program 1: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000180)={&(0x7f0000000100)="7c004e0f7eb6f0ae50030f1c62c166400f3a0fab0a00000004dfc5c4027d3fe566470f113b660f2f785f670f2ba80e0000002599899999", 0x4, &(0x7f0000000140)="f2df590bc46125767452e7875c3051c4e1f810f9c4e2fd1c43c1c1e3ab6546d3c63e42e200c402a947cdc4a2399ae3", {[0x1]}}, &(0x7f0000000240)={&(0x7f00000001c0)="c4a10dd5961d000000c481235c1cb42667f20f12f5f3436f42a4c4017c5aff3c2ac44178511e400f13ae00000000c481fc510b", 0x0, &(0x7f0000000200)="3e410f01d845894d07c461ff123bf0f69504000000c46331782f1ac44175facb460f6f14a9f0440fb32f450fe4167600"}, 0x8, &(0x7f0000000280)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a5377986fc254ec2862883ce7257cd4f7ae2dcfdaef81c581d1b4223e49887ee68e87ed537d5b2e957e1fac165be3eb34c5174f6279277376cbe5d10966df793456b54921f664921e1615264cc762c189704152109b0dff9eb9ca92da732cc5b46ffffff7f025485dc560b67fa9950386e7d44374265b739aa0ef8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c091b75999c66551d206c48cab1b787530de"], 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) 20:25:56 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0x84, 0x0) [ 1143.150444][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 1143.150540][ T28] audit: type=1804 audit(1590265556.472:797): pid=17849 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir374862090/syzkaller.5NWs5l/1107/file0" dev="sda1" ino=15955 res=1 20:25:56 executing program 2: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="ca45cb1afbea4e46e299", @ANYRESHEX=0x0]) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$HIDIOCGVERSION(r2, 0x80044801, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) statfs(&(0x7f00000001c0)='./file0\x00', 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x2) r3 = socket$inet6(0xa, 0x2, 0x0) dup3(r3, r0, 0x0) 20:25:56 executing program 4: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x121000, 0x44) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x82) sendfile(r1, r0, 0x0, 0xa198) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000080)={0x7, 0x9, 0xadc}) r3 = open(&(0x7f0000000000)='./file0\x00', 0x141042, 0x100) sendfile(r3, r2, 0x0, 0xa198) [ 1143.296955][ T28] audit: type=1804 audit(1590265556.472:798): pid=17849 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir374862090/syzkaller.5NWs5l/1107/file0" dev="sda1" ino=15955 res=1 [ 1143.312326][T17872] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 1143.412356][ T28] audit: type=1804 audit(1590265556.732:799): pid=17880 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir374862090/syzkaller.5NWs5l/1108/file0" dev="sda1" ino=16109 res=1 [ 1143.442083][ T28] audit: type=1804 audit(1590265556.742:800): pid=17880 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir374862090/syzkaller.5NWs5l/1108/file0" dev="sda1" ino=16109 res=1 [ 1143.460958][T17872] device macsec1 entered promiscuous mode [ 1143.487987][T17872] device virt_wifi0 entered promiscuous mode 20:25:56 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0x85, 0x0) [ 1143.596738][T17872] device virt_wifi0 left promiscuous mode [ 1143.649487][ T28] audit: type=1804 audit(1590265556.752:801): pid=17880 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir374862090/syzkaller.5NWs5l/1108/file0" dev="sda1" ino=16109 res=1 [ 1143.807958][ T28] audit: type=1804 audit(1590265556.782:802): pid=17880 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir374862090/syzkaller.5NWs5l/1108/file0" dev="sda1" ino=16109 res=1 20:25:57 executing program 5: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x82) sendfile(r1, r0, 0x0, 0xa198) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r5, 0x1, 0x0, 0x0, {0x3}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r5, 0x60e19d97892be67, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xd8e1}]}, 0x28}, 0x1, 0x0, 0x0, 0x840}, 0xc00c001) r6 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000001580)=ANY=[], 0x119) sendfile(r6, r2, 0x0, 0xa198) [ 1143.932169][ T28] audit: type=1804 audit(1590265556.802:803): pid=17884 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir374862090/syzkaller.5NWs5l/1108/file0" dev="sda1" ino=16109 res=1 [ 1144.080987][ T28] audit: type=1804 audit(1590265556.802:804): pid=17884 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir374862090/syzkaller.5NWs5l/1108/file0" dev="sda1" ino=16109 res=1 20:25:57 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x6, 0x0, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086201, &(0x7f0000000280)=0x5) ioctl$VIDIOC_G_JPEGCOMP(r3, 0x808c563d, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}, 0x1}, @in={0x2, 0x0, @empty}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}], 0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r4}) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x5c}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(0x0, 0x1, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r8 = socket$inet6(0xa, 0x80005, 0x0) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r8, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c) r9 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x0, 0x400400) r10 = gettid() syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') accept4$vsock_stream(r9, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @hyper}, 0x10, 0x80000) getgid() ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000240)) writev(r5, &(0x7f0000000080), 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) ioprio_get$pid(0x2, r10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000000000)) tkill(r10, 0x1004000000016) fgetxattr(r5, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x0, 0x0) close(r7) dup2(r9, r6) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0xbba}, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000007c0)={[{0x7, 0x3, 0x0, 0xe2fe, 0xffffffffffffff81, 0x4, 0x4, 0xffffffffffffb1b0, 0x10000, 0x0, 0x6, 0x2}, {0x1, 0x7, 0x8, 0x8, 0x0, 0x0, 0x8, 0xd3, 0x1, 0x0, 0x3f}, {0x10000, 0x3f, 0x2, 0xea7, 0x5, 0x20, 0x4, 0x1, 0x80000001, 0x0, 0x8245, 0x0, 0x2}]}) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) timer_delete(0x0) 20:25:57 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0x86, 0x0) 20:25:57 executing program 4: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1e1140, 0xd0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x82) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000140)={0x7, &(0x7f0000000080)=[{@none}, {}, {@fixed}, {@none}, {@none}, {}, {@fixed}]}) sendfile(r1, r0, 0x0, 0xa198) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x10000, 0x0) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000004c0)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r3, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x5c, r3, 0x100, 0x70bd26, 0x5c4, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x5c}}, 0x20000000) sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x4040800) r4 = open(&(0x7f0000000000)='./file0\x00', 0x6e8900, 0x52) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r5, r4, 0x0, 0xa198) [ 1144.198934][ T28] audit: type=1804 audit(1590265556.902:805): pid=17888 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir984313495/syzkaller.4Sv1HN/1009/file0" dev="sda1" ino=16107 res=1 20:25:57 executing program 1: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000180)={&(0x7f0000000100)="7c004e0f7eb6f0ae50030f1c62c166400f3a0fab0a00000004dfc5c4027d3fe566470f113b660f2f785f670f2ba80e0000002599899999", 0x4, &(0x7f0000000140)="f2df590bc46125767452e7875c3051c4e1f810f9c4e2fd1c43c1c1e3ab6546d3c63e42e200c402a947cdc4a2399ae3", {[0x1]}}, &(0x7f0000000240)={&(0x7f00000001c0)="c4a10dd5961d000000c481235c1cb42667f20f12f5f3436f42a4c4017c5aff3c2ac44178511e400f13ae00000000c481fc510b", 0x0, &(0x7f0000000200)="3e410f01d845894d07c461ff123bf0f69504000000c46331782f1ac44175facb460f6f14a9f0440fb32f450fe4167600"}, 0x8, &(0x7f0000000280)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a5377986fc254ec2862883ce7257cd4f7ae2dcfdaef81c581d1b4223e49887ee68e87ed537d5b2e957e1fac165be3eb34c5174f6279277376cbe5d10966df793456b54921f664921e1615264cc762c189704152109b0dff9eb9ca92da732cc5b46ffffff7f025485dc560b67fa9950386e7d44374265b739aa0ef8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c091b75999c66551d206c48cab1b787530de"], 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) [ 1144.359542][ T28] audit: type=1804 audit(1590265556.902:806): pid=17860 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir984313495/syzkaller.4Sv1HN/1009/file0" dev="sda1" ino=16107 res=1 20:25:57 executing program 4: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x400000000000030, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10) connect$inet(r5, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) r6 = dup2(0xffffffffffffffff, r3) ioctl$EVIOCGPROP(r6, 0xc004743e, &(0x7f0000000000)=""/246) setsockopt$CAN_RAW_JOIN_FILTERS(r6, 0x65, 0x6, &(0x7f0000000000), 0x4) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x82) sendfile(r1, r0, 0x0, 0xa198) r7 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) ftruncate(r1, 0x3) r8 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r8, r7, 0x0, 0xa198) [ 1144.510198][T17911] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 1144.717911][T17911] device macsec1 entered promiscuous mode [ 1144.741667][T17911] device virt_wifi0 entered promiscuous mode 20:25:58 executing program 5: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x82) sendfile(r1, r0, 0x0, 0xa198) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000001580)=ANY=[], 0x119) sendfile(r3, r2, 0x0, 0xa198) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r5 = dup2(r4, r4) ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$LOOP_SET_DIRECT_IO(r5, 0x4c08, 0x200) connect(r3, &(0x7f0000000080)=@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x80) [ 1144.823905][T17911] device virt_wifi0 left promiscuous mode 20:25:58 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0x87, 0x0) 20:25:58 executing program 4: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x82) sendfile(r1, r0, 0x0, 0xa198) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r3, r2, 0x0, 0xa198) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r3, 0x800442d4, &(0x7f0000000000)=0x7ff) 20:25:58 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x6, 0x0, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086201, &(0x7f0000000280)=0x5) ioctl$VIDIOC_G_JPEGCOMP(r3, 0x808c563d, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}, 0x1}, @in={0x2, 0x0, @empty}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}], 0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r4}) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x5c}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(0x0, 0x1, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r8 = socket$inet6(0xa, 0x80005, 0x0) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r8, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c) r9 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x0, 0x400400) r10 = gettid() syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') accept4$vsock_stream(r9, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @hyper}, 0x10, 0x80000) getgid() ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000240)) writev(r5, &(0x7f0000000080), 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) ioprio_get$pid(0x2, r10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000000000)) tkill(r10, 0x1004000000016) fgetxattr(r5, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x0, 0x0) close(r7) dup2(r9, r6) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0xbba}, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000007c0)={[{0x7, 0x3, 0x0, 0xe2fe, 0xffffffffffffff81, 0x4, 0x4, 0xffffffffffffb1b0, 0x10000, 0x0, 0x6, 0x2}, {0x1, 0x7, 0x8, 0x8, 0x0, 0x0, 0x8, 0xd3, 0x1, 0x0, 0x3f}, {0x10000, 0x3f, 0x2, 0xea7, 0x5, 0x20, 0x4, 0x1, 0x80000001, 0x0, 0x8245, 0x0, 0x2}]}) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) timer_delete(0x0) 20:25:58 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0x88, 0x0) 20:25:58 executing program 1: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000180)={&(0x7f0000000100)="7c004e0f7eb6f0ae50030f1c62c166400f3a0fab0a00000004dfc5c4027d3fe566470f113b660f2f785f670f2ba80e0000002599899999", 0x4, &(0x7f0000000140)="f2df590bc46125767452e7875c3051c4e1f810f9c4e2fd1c43c1c1e3ab6546d3c63e42e200c402a947cdc4a2399ae3", {[0x1]}}, &(0x7f0000000240)={&(0x7f00000001c0)="c4a10dd5961d000000c481235c1cb42667f20f12f5f3436f42a4c4017c5aff3c2ac44178511e400f13ae00000000c481fc510b", 0x0, &(0x7f0000000200)="3e410f01d845894d07c461ff123bf0f69504000000c46331782f1ac44175facb460f6f14a9f0440fb32f450fe4167600"}, 0x8, &(0x7f0000000280)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a5377986fc254ec2862883ce7257cd4f7ae2dcfdaef81c581d1b4223e49887ee68e87ed537d5b2e957e1fac165be3eb34c5174f6279277376cbe5d10966df793456b54921f664921e1615264cc762c189704152109b0dff9eb9ca92da732cc5b46ffffff7f025485dc560b67fa9950386e7d44374265b739aa0ef8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c091b75999c66551d206c48cab1b787530de"], 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) [ 1145.525006][T17948] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 1145.638180][T17948] device macsec1 entered promiscuous mode [ 1145.645498][T17948] device virt_wifi0 entered promiscuous mode [ 1145.692869][T17948] device virt_wifi0 left promiscuous mode 20:25:59 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0x89, 0x0) 20:25:59 executing program 4: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x20) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x82) sendfile(r1, r0, 0x0, 0xa198) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r3, 0x2282, &(0x7f0000000080)) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r4, r2, 0x0, 0xa198) 20:25:59 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0x8a, 0x0) 20:25:59 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x6, 0x0, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086201, &(0x7f0000000280)=0x5) ioctl$VIDIOC_G_JPEGCOMP(r3, 0x808c563d, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}, 0x1}, @in={0x2, 0x0, @empty}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}], 0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r4}) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x5c}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(0x0, 0x1, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r8 = socket$inet6(0xa, 0x80005, 0x0) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r8, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c) r9 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x0, 0x400400) r10 = gettid() syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') accept4$vsock_stream(r9, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @hyper}, 0x10, 0x80000) getgid() ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000240)) writev(r5, &(0x7f0000000080), 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) ioprio_get$pid(0x2, r10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000000000)) tkill(r10, 0x1004000000016) fgetxattr(r5, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x0, 0x0) close(r7) dup2(r9, r6) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0xbba}, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000007c0)={[{0x7, 0x3, 0x0, 0xe2fe, 0xffffffffffffff81, 0x4, 0x4, 0xffffffffffffb1b0, 0x10000, 0x0, 0x6, 0x2}, {0x1, 0x7, 0x8, 0x8, 0x0, 0x0, 0x8, 0xd3, 0x1, 0x0, 0x3f}, {0x10000, 0x3f, 0x2, 0xea7, 0x5, 0x20, 0x4, 0x1, 0x80000001, 0x0, 0x8245, 0x0, 0x2}]}) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) timer_delete(0x0) 20:25:59 executing program 1: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000180)={&(0x7f0000000100)="7c004e0f7eb6f0ae50030f1c62c166400f3a0fab0a00000004dfc5c4027d3fe566470f113b660f2f785f670f2ba80e0000002599899999", 0x4, &(0x7f0000000140)="f2df590bc46125767452e7875c3051c4e1f810f9c4e2fd1c43c1c1e3ab6546d3c63e42e200c402a947cdc4a2399ae3", {[0x1]}}, &(0x7f0000000240)={&(0x7f00000001c0)="c4a10dd5961d000000c481235c1cb42667f20f12f5f3436f42a4c4017c5aff3c2ac44178511e400f13ae00000000c481fc510b", 0x0, &(0x7f0000000200)="3e410f01d845894d07c461ff123bf0f69504000000c46331782f1ac44175facb460f6f14a9f0440fb32f450fe4167600"}, 0x8, &(0x7f0000000280)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a5377986fc254ec2862883ce7257cd4f7ae2dcfdaef81c581d1b4223e49887ee68e87ed537d5b2e957e1fac165be3eb34c5174f6279277376cbe5d10966df793456b54921f664921e1615264cc762c189704152109b0dff9eb9ca92da732cc5b46ffffff7f025485dc560b67fa9950386e7d44374265b739aa0ef8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c091b75999c66551d206c48cab1b787530de3629da0b37b211578542ae70ac"], 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) 20:25:59 executing program 5: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x82) sendfile(r1, r0, 0x0, 0xa198) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x8) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000001580)=ANY=[], 0x119) sendfile(r3, r2, 0x0, 0xa198) 20:26:00 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0x8b, 0x0) [ 1146.631760][T17981] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 1146.799837][T17981] device macsec1 entered promiscuous mode [ 1146.841461][T17981] device virt_wifi0 entered promiscuous mode 20:26:00 executing program 4: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x82) sendfile(r1, r0, 0x0, 0xa198) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, &(0x7f0000000000)=0x3000) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r3, r2, 0x0, 0xa198) [ 1146.910480][T17981] device virt_wifi0 left promiscuous mode 20:26:00 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x6, 0x0, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086201, &(0x7f0000000280)=0x5) ioctl$VIDIOC_G_JPEGCOMP(r3, 0x808c563d, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}, 0x1}, @in={0x2, 0x0, @empty}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}], 0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r4}) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x5c}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(0x0, 0x1, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r8 = socket$inet6(0xa, 0x80005, 0x0) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r8, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c) r9 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x0, 0x400400) r10 = gettid() syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') accept4$vsock_stream(r9, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @hyper}, 0x10, 0x80000) getgid() ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000240)) writev(r5, &(0x7f0000000080), 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) ioprio_get$pid(0x2, r10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000000000)) tkill(r10, 0x1004000000016) fgetxattr(r5, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x0, 0x0) close(r7) dup2(r9, r6) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0xbba}, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000007c0)={[{0x7, 0x3, 0x0, 0xe2fe, 0xffffffffffffff81, 0x4, 0x4, 0xffffffffffffb1b0, 0x10000, 0x0, 0x6, 0x2}, {0x1, 0x7, 0x8, 0x8, 0x0, 0x0, 0x8, 0xd3, 0x1, 0x0, 0x3f}, {0x10000, 0x3f, 0x2, 0xea7, 0x5, 0x20, 0x4, 0x1, 0x80000001, 0x0, 0x8245, 0x0, 0x2}]}) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) timer_delete(0x0) 20:26:00 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0x8c, 0x0) 20:26:00 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0x8d, 0x0) 20:26:00 executing program 1: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000180)={&(0x7f0000000100)="7c004e0f7eb6f0ae50030f1c62c166400f3a0fab0a00000004dfc5c4027d3fe566470f113b660f2f785f670f2ba80e0000002599899999", 0x4, &(0x7f0000000140)="f2df590bc46125767452e7875c3051c4e1f810f9c4e2fd1c43c1c1e3ab6546d3c63e42e200c402a947cdc4a2399ae3", {[0x1]}}, &(0x7f0000000240)={&(0x7f00000001c0)="c4a10dd5961d000000c481235c1cb42667f20f12f5f3436f42a4c4017c5aff3c2ac44178511e400f13ae00000000c481fc510b", 0x0, &(0x7f0000000200)="3e410f01d845894d07c461ff123bf0f69504000000c46331782f1ac44175facb460f6f14a9f0440fb32f450fe4167600"}, 0x8, &(0x7f0000000280)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810d00001c0012000b0001006d616373656300e10b00020005000700010000000a000540340000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7cf68a72e18b043723262ef1db55855e9b9c3c4f3d85375cfa53566d1bccb85f7297cb07953a21aa4f222f0b3883bb31e8a8f15e68f55716d40aae2130362bc729067a2c1827fb817eec56022b28d49a32965d048e336c6476967ed3c42524afa00cc95b8b1bd067d02f67da010df77addc64711eb3b771464ded7467a586a825be4a7edbb278663c325af5e83e40a3b1b721b5fd06c0500279efe41749bfb87684800f3b4768d6ebe10ee82f6b2e7f55de781d27c9588c2cc3b1730589391f51ebe1ecba1b7d5ba1cc81386ee9fc11ef8c33b3a79f3f9187c9761c15d000000000000000000000000000000e81c0509f83a199089942b308c3f9e1da97bcaa66b4b31cdd2ef42d2bb7b42726a279c5019f4b408633cfce834beb5a343515af9401a8664936c62df130169b7670895897fb13eec0ff09e2e6311dc077a745b63a8fd0000000000000000000000000000c7ae7ad999ddf278dd38f2582244284cdae195f79b6d18165efd92b6946a0965730fbdbdf0f9a37b4b7fe70fd4c82805a286eba1c588a555a6f66035510a89296ff08d3a09d516182d1224d920f4fef3703549e2dfdfe9cdbf518b9ce90be973ede58d65bb60d88308021fcc32653dd4d5c701fcc5080d9d64c91fbd4e3fdfe37b256473ed39500cc751414400dcafb7be350a6a2dfc7991ede5", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a5377986fc254ec2862883ce7257cd4f7ae2dcfdaef81c581d1b4223e49887ee68e87ed537d5b2e957e1fac165be3eb34c5174f6279277376cbe5d10966df793456b54921f664921e1615264cc762c189704152109b0dff9eb9ca92da732cc5b46ffffff7f025485dc560b67fa9950386e7d44374265b739aa0ef8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c091b75999c66551d206c48cab1b787530de3629da0b37b211578542ae70ac"], 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) [ 1147.704211][T18012] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 20:26:01 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0x8e, 0x0) [ 1147.783935][T18012] device macsec1 entered promiscuous mode [ 1147.802965][T18012] device virt_wifi0 entered promiscuous mode 20:26:01 executing program 2: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="726f75705f69f40000", @ANYRESDEC=0x0]) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) statfs(&(0x7f00000001c0)='./file0\x00', 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x2) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000640)={{{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000100)=0xe8) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000840)={{0x0, 0x0, 0x0, r3, 0x0, 0x0, 0xb}, 0xb8fb, 0xffc, 0x3, 0x8000, 0x0, 0x0, 0x81}) r4 = syz_open_dev$usbmon(0x0, 0x1, 0x48000) recvfrom$inet(r4, 0x0, 0x202, 0x0, 0x0, 0x10000007c) r5 = shmget(0xffffffffffffffff, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000300)='./file0/file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000540)={{{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8) shmctl$IPC_SET(r5, 0x1, &(0x7f0000000840)={{0x0, r6, r7, r8, r7, 0x0, 0xb}, 0xb8fb, 0xffc, 0x3, 0x8000, 0x0, 0x0, 0x81}) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000380)={{}, {0x1, 0x5}, [{0x2, 0x1}, {}, {0x2, 0x4}, {0x2, 0x4}], {0x4, 0x1}, [{0x8, 0x7}, {0x8, 0x3}, {}, {0x8, 0x8}, {0x8, 0x7}, {0x8, 0x0, r7}], {0x10, 0x3}, {0x20, 0x2}}, 0x74, 0x1) r9 = socket$inet6(0xa, 0x2, 0x0) dup3(r9, r0, 0x0) [ 1147.841928][T18012] device virt_wifi0 left promiscuous mode 20:26:01 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0x8f, 0x0) [ 1147.974055][T18023] fuse: Bad value for 'user_id' 20:26:01 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0x90, 0x0) [ 1148.493349][T18026] fuse: Bad value for 'user_id' 20:26:02 executing program 1: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000180)={&(0x7f0000000100)="7c004e0f7eb6f0ae50030f1c62c166400f3a0fab0a00000004dfc5c4027d3fe566470f113b660f2f785f670f2ba80e0000002599899999", 0x4, &(0x7f0000000140)="f2df590bc46125767452e7875c3051c4e1f810f9c4e2fd1c43c1c1e3ab6546d3c63e42e200c402a947cdc4a2399ae3", {[0x1]}}, &(0x7f0000000240)={&(0x7f00000001c0)="c4a10dd5961d000000c481235c1cb42667f20f12f5f3436f42a4c4017c5aff3c2ac44178511e400f13ae00000000c481fc510b", 0x0, &(0x7f0000000200)="3e410f01d845894d07c461ff123bf0f69504000000c46331782f1ac44175facb460f6f14a9f0440fb32f450fe4167600"}, 0x8, &(0x7f0000000280)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a5377986fc254ec2862883ce7257cd4f7ae2dcfdaef81c581d1b4223e49887ee68e87ed537d5b2e957e1fac165be3eb34c5174f6279277376cbe5d10966df793456b54921f664921e1615264cc762c189704152109b0dff9eb9ca92da732cc5b46ffffff7f025485dc560b67fa9950386e7d44374265b739aa0ef8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c091b75999c66551d206c48cab1b787530de3629da0b37b211578542ae70ac"], 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) 20:26:02 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0x91, 0x0) 20:26:02 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x6, 0x0, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086201, &(0x7f0000000280)=0x5) ioctl$VIDIOC_G_JPEGCOMP(r3, 0x808c563d, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}, 0x1}, @in={0x2, 0x0, @empty}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}], 0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r4}) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x5c}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(0x0, 0x1, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r8 = socket$inet6(0xa, 0x80005, 0x0) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r8, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c) r9 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x0, 0x400400) r10 = gettid() syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') accept4$vsock_stream(r9, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @hyper}, 0x10, 0x80000) getgid() ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000240)) writev(r5, &(0x7f0000000080), 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) ioprio_get$pid(0x2, r10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000000000)) tkill(r10, 0x1004000000016) fgetxattr(r5, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x0, 0x0) close(r7) dup2(r9, r6) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0xbba}, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000007c0)={[{0x7, 0x3, 0x0, 0xe2fe, 0xffffffffffffff81, 0x4, 0x4, 0xffffffffffffb1b0, 0x10000, 0x0, 0x6, 0x2}, {0x1, 0x7, 0x8, 0x8, 0x0, 0x0, 0x8, 0xd3, 0x1, 0x0, 0x3f}, {0x10000, 0x3f, 0x2, 0xea7, 0x5, 0x20, 0x4, 0x1, 0x80000001, 0x0, 0x8245, 0x0, 0x2}]}) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) timer_delete(0x0) [ 1148.777419][T18038] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 1148.869074][T18038] device macsec1 entered promiscuous mode [ 1148.890988][T18038] device virt_wifi0 entered promiscuous mode [ 1148.932492][T18038] device virt_wifi0 left promiscuous mode 20:26:02 executing program 2: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) statfs(&(0x7f00000001c0)='./file0\x00', 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x2) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r5 = dup2(r4, r4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x400000000000030, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000300)={0x0, 'batadv_slave_1\x00', {}, 0x1}) ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f0000000000)=""/246) setsockopt$inet_sctp_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000040)={0x3f, 0x9, 0xb5, 0x2, 0x20, 0x81, 0x6, 0x81, 0x7f, 0x5, 0x40, 0x0, 0xf7, 0x9b}, 0xe) dup3(r3, r0, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) accept4$tipc(r6, 0x0, &(0x7f0000000280), 0x800) 20:26:02 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0x92, 0x0) 20:26:02 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0x93, 0x0) 20:26:03 executing program 1: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000180)={&(0x7f0000000100)="7c004e0f7eb6f0ae50030f1c62c166400f3a0fab0a00000004dfc5c4027d3fe566470f113b660f2f785f670f2ba80e0000002599899999", 0x4, &(0x7f0000000140)="f2df590bc46125767452e7875c3051c4e1f810f9c4e2fd1c43c1c1e3ab6546d3c63e42e200c402a947cdc4a2399ae3", {[0x1]}}, &(0x7f0000000240)={&(0x7f00000001c0)="c4a10dd5961d000000c481235c1cb42667f20f12f5f3436f42a4c4017c5aff3c2ac44178511e400f13ae00000000c481fc510b", 0x0, &(0x7f0000000200)="3e410f01d845894d07c461ff123bf0f69504000000c46331782f1ac44175facb460f6f14a9f0440fb32f450fe4167600"}, 0x8, &(0x7f0000000280)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a5377986fc254ec2862883ce7257cd4f7ae2dcfdaef81c581d1b4223e49887ee68e87ed537d5b2e957e1fac165be3eb34c5174f6279277376cbe5d10966df793456b54921f664921e1615264cc762c189704152109b0dff9eb9ca92da732cc5b46ffffff7f025485dc560b67fa9950386e7d44374265b739aa0ef8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c091b75999c66551d206c48cab1b787530de3629da0b37b211578542ae70ac9e8c0dbe754a77"], 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) 20:26:03 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x6, 0x0, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086201, &(0x7f0000000280)=0x5) ioctl$VIDIOC_G_JPEGCOMP(r3, 0x808c563d, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}, 0x1}, @in={0x2, 0x0, @empty}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}], 0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r4}) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x5c}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(0x0, 0x1, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r8 = socket$inet6(0xa, 0x80005, 0x0) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r8, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c) r9 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x0, 0x400400) r10 = gettid() syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') accept4$vsock_stream(r9, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @hyper}, 0x10, 0x80000) getgid() ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000240)) writev(r5, &(0x7f0000000080), 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) ioprio_get$pid(0x2, r10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000000000)) tkill(r10, 0x1004000000016) fgetxattr(r5, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x0, 0x0) close(r7) dup2(r9, r6) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0xbba}, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000007c0)={[{0x7, 0x3, 0x0, 0xe2fe, 0xffffffffffffff81, 0x4, 0x4, 0xffffffffffffb1b0, 0x10000, 0x0, 0x6, 0x2}, {0x1, 0x7, 0x8, 0x8, 0x0, 0x0, 0x8, 0xd3, 0x1, 0x0, 0x3f}, {0x10000, 0x3f, 0x2, 0xea7, 0x5, 0x20, 0x4, 0x1, 0x80000001, 0x0, 0x8245, 0x0, 0x2}]}) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) timer_delete(0x0) [ 1149.741691][T18074] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 1149.810427][T18074] device macsec1 entered promiscuous mode [ 1149.832493][T18074] device virt_wifi0 entered promiscuous mode [ 1149.851741][T18074] device virt_wifi0 left promiscuous mode 20:26:03 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0x94, 0x0) 20:26:03 executing program 2: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000002c0)) getpriority(0x2, r0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="30726fae37b2885479012e30303030303030307365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) statfs(&(0x7f00000001c0)='./file0\x00', 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x2) r4 = socket$inet6(0xa, 0x2, 0x0) dup3(r4, r1, 0x0) 20:26:03 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0x95, 0x0) [ 1150.390204][T18097] fuse: Bad value for 'fd' 20:26:03 executing program 1: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000180)={&(0x7f0000000100)="7c004e0f7eb6f0ae50030f1c62c166400f3a0fab0a00000004dfc5c4027d3fe566470f113b660f2f785f670f2ba80e0000002599899999", 0x4, &(0x7f0000000140)="f2df590bc46125767452e7875c3051c4e1f810f9c4e2fd1c43c1c1e3ab6546d3c63e42e200c402a947cdc4a2399ae3", {[0x1]}}, &(0x7f0000000240)={&(0x7f00000001c0)="c4a10dd5961d000000c481235c1cb42667f20f12f5f3436f42a4c4017c5aff3c2ac44178511e400f13ae00000000c481fc510b", 0x0, &(0x7f0000000200)="3e410f01d845894d07c461ff123bf0f69504000000c46331782f1ac44175facb460f6f14a9f0440fb32f450fe4167600"}, 0x8, &(0x7f0000000280)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a5377986fc254ec2862883ce7257cd4f7ae2dcfdaef81c581d1b4223e49887ee68e87ed537d5b2e957e1fac165be3eb34c5174f6279277376cbe5d10966df793456b54921f664921e1615264cc762c189704152109b0dff9eb9ca92da732cc5b46ffffff7f025485dc560b67fa9950386e7d44374265b739aa0ef8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c091b75999c66551d206c48cab1b787530de3629da0b37b211578542ae70ac9e8c0dbe754a77"], 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) 20:26:03 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0x96, 0x0) [ 1150.523550][T18102] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 1150.610379][T18102] device macsec1 entered promiscuous mode [ 1150.644721][T18102] device virt_wifi0 entered promiscuous mode 20:26:04 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0x97, 0x0) [ 1150.676804][T18102] device virt_wifi0 left promiscuous mode 20:26:04 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x6, 0x0, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086201, &(0x7f0000000280)=0x5) ioctl$VIDIOC_G_JPEGCOMP(r3, 0x808c563d, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}, 0x1}, @in={0x2, 0x0, @empty}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}], 0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r4}) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x5c}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(0x0, 0x1, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r8 = socket$inet6(0xa, 0x80005, 0x0) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r8, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c) r9 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x0, 0x400400) r10 = gettid() syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') accept4$vsock_stream(r9, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @hyper}, 0x10, 0x80000) getgid() ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000240)) writev(r5, &(0x7f0000000080), 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) ioprio_get$pid(0x2, r10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000000000)) tkill(r10, 0x1004000000016) fgetxattr(r5, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x0, 0x0) close(r7) dup2(r9, r6) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0xbba}, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000007c0)={[{0x7, 0x3, 0x0, 0xe2fe, 0xffffffffffffff81, 0x4, 0x4, 0xffffffffffffb1b0, 0x10000, 0x0, 0x6, 0x2}, {0x1, 0x7, 0x8, 0x8, 0x0, 0x0, 0x8, 0xd3, 0x1, 0x0, 0x3f}, {0x10000, 0x3f, 0x2, 0xea7, 0x5, 0x20, 0x4, 0x1, 0x80000001, 0x0, 0x8245, 0x0, 0x2}]}) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) timer_delete(0x0) 20:26:04 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0x98, 0x0) 20:26:04 executing program 1: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000180)={&(0x7f0000000100)="7c004e0f7eb6f0ae50030f1c62c166400f3a0fab0a00000004dfc5c4027d3fe566470f113b660f2f785f670f2ba80e0000002599899999", 0x4, &(0x7f0000000140)="f2df590bc46125767452e7875c3051c4e1f810f9c4e2fd1c43c1c1e3ab6546d3c63e42e200c402a947cdc4a2399ae3", {[0x1]}}, &(0x7f0000000240)={&(0x7f00000001c0)="c4a10dd5961d000000c481235c1cb42667f20f12f5f3436f42a4c4017c5aff3c2ac44178511e400f13ae00000000c481fc510b", 0x0, &(0x7f0000000200)="3e410f01d845894d07c461ff123bf0f69504000000c46331782f1ac44175facb460f6f14a9f0440fb32f450fe4167600"}, 0x8, &(0x7f0000000280)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810d00001c0012000b0001006d616373656300e10b00020005000700010000000a000540340000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7cf68a72e18b043723262ef1db55855e9b9c3c4f3d85375cfa53566d1bccb85f7297cb07953a21aa4f222f0b3883bb31e8a8f15e68f55716d40aae2130362bc729067a2c1827fb817eec56022b28d49a32965d048e336c6476967ed3c42524afa00cc95b8b1bd067d02f67da010df77addc64711eb3b771464ded7467a586a825be4a7edbb278663c325af5e83e40a3b1b721b5fd06c0500279efe41749bfb87684800f3b4768d6ebe10ee82f6b2e7f55de781d27c9588c2cc3b1730589391f51ebe1ecba1b7d5ba1cc81386ee9fc11ef8c33b3a79f3f9187c9761c15d000000000000000000000000000000e81c0509f83a199089942b308c3f9e1da97bcaa66b4b31cdd2ef42d2bb7b42726a279c5019f4b408633cfce834beb5a343515af9401a8664936c62df130169b7670895897fb13eec0ff09e2e6311dc077a745b63a8fd0000000000000000000000000000c7ae7ad999ddf278dd38f2582244284cdae195f79b6d18165efd92b6946a0965730fbdbdf0f9a37b4b7fe70fd4c82805a286eba1c588a555a6f66035510a89296ff08d3a09d516182d1224d920f4fef3703549e2dfdfe9cdbf518b9ce90be973ede58d65bb60d88308021fcc32653dd4d5c701fcc5080d9d64c91fbd4e3fdfe37b256473ed39500cc751414400dcafb7be350a6a2dfc7991ede5", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a5377986fc254ec2862883ce7257cd4f7ae2dcfdaef81c581d1b4223e49887ee68e87ed537d5b2e957e1fac165be3eb34c5174f6279277376cbe5d10966df793456b54921f664921e1615264cc762c189704152109b0dff9eb9ca92da732cc5b46ffffff7f025485dc560b67fa9950386e7d44374265b739aa0ef8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c091b75999c66551d206c48cab1b787530de3629da0b37b211578542ae70ac9e8c0dbe754a77"], 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) [ 1151.203273][T18122] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 1151.272010][T18122] device macsec1 entered promiscuous mode [ 1151.312040][T18122] device virt_wifi0 entered promiscuous mode 20:26:04 executing program 4: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x440, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000000080)={0x1, 0x4}) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x82) sendfile(r1, r0, 0x0, 0xa198) r3 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x2402a414}, 0x0) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240)='gtp\x00') sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="74235daccc7af340a1", @ANYRES16=r5, @ANYRESDEC], 0x3}, 0x1, 0x0, 0x0, 0x28944}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$KVM_S390_UCAS_MAP(0xffffffffffffffff, 0x4018ae50, &(0x7f0000000380)={0x10001, 0x1, 0x5}) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}, 0x1, 0xc00000000000000}, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002abd7000fedbdf2501000000060006000400000008000100", @ANYRES32=r8, @ANYBLOB="08000900030000000800090000000000"], 0x34}, 0x1, 0x0, 0x0, 0x40051}, 0x40000000) r9 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r9, r3, 0x0, 0xa198) [ 1151.353841][T18122] device virt_wifi0 left promiscuous mode [ 1151.392447][T18097] fuse: Bad value for 'fd' 20:26:04 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0x99, 0x0) [ 1151.549316][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 1151.549336][ T28] audit: type=1804 audit(1590265564.873:837): pid=18134 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir374862090/syzkaller.5NWs5l/1114/file0" dev="sda1" ino=15851 res=1 [ 1151.699361][ T28] audit: type=1804 audit(1590265564.973:838): pid=18136 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir374862090/syzkaller.5NWs5l/1114/file0" dev="sda1" ino=15851 res=1 20:26:05 executing program 1: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000180)={&(0x7f0000000100)="7c004e0f7eb6f0ae50030f1c62c166400f3a0fab0a00000004dfc5c4027d3fe566470f113b660f2f785f670f2ba80e0000002599899999", 0x4, &(0x7f0000000140)="f2df590bc46125767452e7875c3051c4e1f810f9c4e2fd1c43c1c1e3ab6546d3c63e42e200c402a947cdc4a2399ae3", {[0x1]}}, &(0x7f0000000240)={&(0x7f00000001c0)="c4a10dd5961d000000c481235c1cb42667f20f12f5f3436f42a4c4017c5aff3c2ac44178511e400f13ae00000000c481fc510b", 0x0, &(0x7f0000000200)="3e410f01d845894d07c461ff123bf0f69504000000c46331782f1ac44175facb460f6f14a9f0440fb32f450fe4167600"}, 0x8, &(0x7f0000000280)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a5377986fc254ec2862883ce7257cd4f7ae2dcfdaef81c581d1b4223e49887ee68e87ed537d5b2e957e1fac165be3eb34c5174f6279277376cbe5d10966df793456b54921f664921e1615264cc762c189704152109b0dff9eb9ca92da732cc5b46ffffff7f025485dc560b67fa9950386e7d44374265b739aa0ef8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c091b75999c66551d206c48cab1b787530de3629da0b37b211578542ae70ac9e8c0dbe754a77abd06c"], 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) 20:26:05 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0x9a, 0x0) [ 1152.105802][T18147] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 1152.212666][T18147] device macsec1 entered promiscuous mode [ 1152.219082][T18147] device virt_wifi0 entered promiscuous mode [ 1152.250191][ T28] audit: type=1804 audit(1590265565.573:839): pid=18136 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir374862090/syzkaller.5NWs5l/1114/file0" dev="sda1" ino=15851 res=1 [ 1152.252265][T18147] device virt_wifi0 left promiscuous mode [ 1152.306641][ T28] audit: type=1804 audit(1590265565.633:840): pid=18155 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir374862090/syzkaller.5NWs5l/1114/file0" dev="sda1" ino=15851 res=1 20:26:05 executing program 2: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) statfs(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$EVIOCSABS0(r3, 0x401845c0, &(0x7f0000000300)={0x7f, 0x6, 0x2, 0x3, 0x7, 0x1000}) umount2(&(0x7f0000000080)='./file0\x00', 0x2) r5 = socket$inet6(0xa, 0x2, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f0000000100)='y\x00', 0x2, 0x1) dup3(r5, r0, 0x0) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f00000002c0)) fcntl$setown(r5, 0x8, r6) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r4, 0x40a85321, &(0x7f0000000340)={{0x80, 0x80}, 'port1\x00', 0xa2, 0x180021, 0x5, 0x8, 0x1, 0xe000000, 0x1, 0x0, 0x0, 0x7}) 20:26:05 executing program 5: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x82) sendfile(r1, r0, 0x0, 0xa198) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000000)=""/246) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x10efe10675dec16, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r5, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1af5ef04f25331f2c060d7db7959a2f8d4cb0baf48ba8a24a25b0101000095fb747f57b749070000000000003b62d2e25f348b729db5ccf8a8c771329c6867a9e6d3616c829a9eb1c09f077305b4238bc203ee5c42b1bee5c7df1f0d222554b86b528c51575c110401e8b569ede40ea36ac87d50446e829c30050d4544042f89e73de5d2002478ec1aea94f7cf64de6810aaba158afea46be30bb44ea95f91a5b0000000", @ANYRES16=r6, @ANYBLOB="00008a50adf11df83da7a4f9719f326148cba5a916c27940934cbec867c21f9039797c99fd1cdc114ccab260bcba5f29cd5bda1758a1e84dd483fa575e02c642e37c4168f499c7d64040ee1cf814f208a223b35420f74a035a0ee7f5092e45d3431ca0838b3f0579cf4e674fa9e28b7d1d05d7aaffcf52d58bb18f6a9b1745534d28a9b266d29cea78148ef2d89c199ad0865699f18e2e72307ad501977937c0930c1d4a5e98e5fc213d6741edc69cc7451520f9439e5a017ea7269c66c4ba3a7fde"], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x178, r6, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x164, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1c17}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x45af}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3f9fec29}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x40e6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x905c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x27f1f92c}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcb3f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x76ceeb45}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2eb5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x441b4943}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x51e56992}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x17bffa24}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6224b768}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2059b487}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1094}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5774ee52}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6316ca9c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xef7f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7cf4}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5ae42ade}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6b3b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x75438792}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb51d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x34bc3711}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5cd4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x436a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2eb4a268}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x563f16f5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xac79}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x137d9a6e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6130}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x43f27416}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1964}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2ad7d0ac}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x24e7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4e32efda}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x39c6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1aa6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x95f7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2f088232}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8633}]}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x40000}, 0x20010800) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r6, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0xe66eb1eee8a45eee}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x70, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4ee4bdf2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x9142ecc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6e782606}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb0d4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x20d8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x65ca65a8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x61e0ad2e}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x74a6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1c723b30}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x48511b14}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x76d4691b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x735d}]}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20004000}, 0xc8c799354479e6b0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r6, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24048804) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x234, r6, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x14c, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x11339f18}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x26a2aede}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7786}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x48b4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1941}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6ca71694}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x178395a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x70b91294}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x76a6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5e7ee209}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5135}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2a964382}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb5c7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xea29}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2078cc5e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbf8d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xf2a628c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x11255bb7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6161}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x730b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4b9b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4b871d96}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x92ac}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f2a191e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf2a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x874d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xe9ce1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe579}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x296f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x169f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x531b3555}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x84c4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2ee19e7f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6cad33de}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6cfdc00c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x24bbf69d}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x271599ef}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf1a2}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xd4, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9480}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7cea4cdf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7385}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2493e5e3}]}, {0x4}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x132b742a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x32d5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8ea9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6a5e3255}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xeca3231}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x79a64165}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf80e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xaec5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa63c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x23dc20b3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd132}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x10d48826}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x18ea28b7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8bc4262}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7fa381fe}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd102}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfab3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1d9c10aa}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4209ce4}]}]}]}, 0x234}, 0x1, 0x0, 0x0, 0x40080}, 0x20000000) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000001580)=ANY=[], 0x119) sendfile(r3, r2, 0x0, 0xa198) 20:26:05 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x6, 0x0, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086201, &(0x7f0000000280)=0x5) ioctl$VIDIOC_G_JPEGCOMP(r3, 0x808c563d, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}, 0x1}, @in={0x2, 0x0, @empty}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}], 0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r4}) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x5c}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(0x0, 0x1, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r8 = socket$inet6(0xa, 0x80005, 0x0) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r8, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c) r9 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x0, 0x400400) r10 = gettid() syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') accept4$vsock_stream(r9, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @hyper}, 0x10, 0x80000) getgid() ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000240)) writev(r5, &(0x7f0000000080), 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) ioprio_get$pid(0x2, r10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000000000)) tkill(r10, 0x1004000000016) fgetxattr(r5, &(0x7f0000000840)=ANY=[@ANYBLOB="a50500714f7f7100d340200007d2644a6dc2ebdbd5db1f0867e0c40e01380ec99c6dcf2b0bef2533fdea38cd4ecd9f1d377a4a4aff9ec836959ff1a0191bd4bad0b8fe12bb4d78471a2f990c3776675c0dcdab4b39f584bca23a7a2fc19b27bc9b71e8ae59f42a718a3dec8d4374db63d9d795b0ff05c117aa5702290b3103bc28aec5801bb39ebdd5c3be0000000080000000e59b3dbaf1eb15fced2d000000000000000000000040000000000d2e45dfffb6c050f46226daadc63659168a50dda734148a8fe4d5b99b43e2edb3fe3e754d26bc8c16c313ea9c5bbd35d600702cfce25becac92fde18fa3701cb6b04eb84375191fd8b6ed74e535c990d82524dd5f8997e0930060bda93c57d6a9597a9ba79eb57071b5a49b61ec0fc5fee99c8d4984c400c7fef3cbec8abd2f191c94c41ae90c000000000000cf5406b34abd6f3ae8dc2fea6e5ed50649b862a7f665f095e1fd41b083596db8162f405d241c5bf97c009e6a702ce6408bc1cbd4e0c86692a484a9ad8959fb62f028a0dd925761dc08f1ae0ec4888ac7a64e36bd4093e555efee1780107e0e7039b3d3fc0290f93b7222de47e4a1e9f757ac6c5b9dc9ba4b2ebbc92a6e6c3f27f1b797634d06000000d8836651ba9beb008377323cdd69e464db54236c5663421c20f1142589c9b30fb74b378300000000000000000000f9d7ec43bed2988d5dd4fc8dc9841bfbf39d6968a1e41654fa965fe3e38cabc0e4fd7b1f04c0f69baae5767ece069beaf6dc87c4a0fd11d838c0dac7f5457f7531442cb4e1c48638768969c107039ce237c49bf5ca2862750ea66d48f1f2785cb81ec94a1f57dbbf9608b016decfd66f2d94b381c8ffc593a993d6861deca12cda5faf0ff4cd169ae7c52e2f872e1cc8488f6043c528f40c66c42c754e70dc9817c930f52e2fcf1f7b7c25f77ab96fc06baeec662d46ab333610c123394df2b4a9a57e13ec4dd6115488719f6e8384f25a97ee11e3a44ff524185bd4084146507c2735fdf427dd60220a66ebb5ac78ffe5646cf149a16fe3e5e1cba005ab2954d8c3f8ade1ddf979dd99ae3326b4383ea8cc41dfa1619df8bdbb186849df5891cb4d70000000001c9d85747b4617e35bfad5bbe3003cbfaa3eaa7e68ab928032a1338613f3ddb320f74a9a166d9075b6432401938c33c7f13db04c3599e7ced7b59f5f9f821d06889346b3a982253f3523ece1c9a1517b455206ad6f65aa5aa3f324e9b6d090f2d67e7452c450eceda06fd77a3dd2e085541caa961529f246a2d344b1e9c01b0efb78179a28042c79bc26f71f3766f745ecad7ba420b2556ddcf29d01626288174d54b0ef8cac5e2e33b3fa2c7782a66b2a6ce0a1c668f86d6235782e8b8a5c201e1154ef4f37657e9cc8d616c2bd8d9dba80f7048c93961619459863a05cb640b1b17ed290ec4fd2b190f37a8d63ef3088f5ccd137d66f5cb45d6beddeb4f8f3d4918840d8c0b804e3738b64fd8bbf3fd74b8e8411918ccf495fea0bf1611903da79ad10f2a7"], 0x0, 0x0) close(r7) dup2(r9, r6) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0xbba}, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000007c0)={[{0x7, 0x3, 0x0, 0xe2fe, 0xffffffffffffff81, 0x4, 0x4, 0xffffffffffffb1b0, 0x10000, 0x0, 0x6, 0x2}, {0x1, 0x7, 0x8, 0x8, 0x0, 0x0, 0x8, 0xd3, 0x1, 0x0, 0x3f}, {0x10000, 0x3f, 0x2, 0xea7, 0x5, 0x20, 0x4, 0x1, 0x80000001, 0x0, 0x8245, 0x0, 0x2}]}) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) timer_delete(0x0) 20:26:05 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0x9b, 0x0) [ 1152.510030][ T28] audit: type=1804 audit(1590265565.833:841): pid=18162 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir984313495/syzkaller.4Sv1HN/1013/file0" dev="sda1" ino=16269 res=1 [ 1152.609425][ T28] audit: type=1804 audit(1590265565.863:842): pid=18162 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir984313495/syzkaller.4Sv1HN/1013/file0" dev="sda1" ino=16269 res=1 20:26:06 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0x9c, 0x0) 20:26:06 executing program 4: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x82) sendfile(r1, r0, 0x0, 0xa198) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x488303, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r3, r2, 0x0, 0xa198) [ 1152.810603][T18166] device lo entered promiscuous mode [ 1152.968192][T18162] Y­4`Ò˜: renamed from lo 20:26:06 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0x9d, 0x0) [ 1153.098211][ T28] audit: type=1804 audit(1590265566.423:843): pid=18169 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir984313495/syzkaller.4Sv1HN/1013/file0" dev="sda1" ino=16269 res=1 20:26:06 executing program 1: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000180)={&(0x7f0000000100)="7c004e0f7eb6f0ae50030f1c62c166400f3a0fab0a00000004dfc5c4027d3fe566470f113b660f2f785f670f2ba80e0000002599899999", 0x4, &(0x7f0000000140)="f2df590bc46125767452e7875c3051c4e1f810f9c4e2fd1c43c1c1e3ab6546d3c63e42e200c402a947cdc4a2399ae3", {[0x1]}}, &(0x7f0000000240)={&(0x7f00000001c0)="c4a10dd5961d000000c481235c1cb42667f20f12f5f3436f42a4c4017c5aff3c2ac44178511e400f13ae00000000c481fc510b", 0x0, &(0x7f0000000200)="3e410f01d845894d07c461ff123bf0f69504000000c46331782f1ac44175facb460f6f14a9f0440fb32f450fe4167600"}, 0x8, &(0x7f0000000280)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a5377986fc254ec2862883ce7257cd4f7ae2dcfdaef81c581d1b4223e49887ee68e87ed537d5b2e957e1fac165be3eb34c5174f6279277376cbe5d10966df793456b54921f664921e1615264cc762c189704152109b0dff9eb9ca92da732cc5b46ffffff7f025485dc560b67fa9950386e7d44374265b739aa0ef8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c091b75999c66551d206c48cab1b787530de3629da0b37b211578542ae70ac9e8c0dbe754a77abd06c"], 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) [ 1153.134683][ T28] audit: type=1804 audit(1590265566.423:844): pid=18162 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir984313495/syzkaller.4Sv1HN/1013/file0" dev="sda1" ino=16269 res=1 20:26:06 executing program 5: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) sendmmsg(r0, &(0x7f0000003440)=[{{&(0x7f0000000080)=@hci={0x1f, 0xffffffffffffffff, 0x2}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000100)}, {&(0x7f0000000200)="a422f02d9bb31e472fbe5e53c7f673ea5b0f1d461f1b43e8afec3d1f54cf6d62755330f33602e0e1edcb969f51ffd083a1fe08173c399679159c917928b678fff222a3784f2c3768943d11eb2baf8fd3197031143cb7deb111464cdb0a1c73246ae3a63353c5bb4d7e53e61ff971812a66707947ff9dbdc322c9061d9dd6a74601f4a52250a974a0b54ae43639ec87bbad05ae341bb374e232bea35f1634636219a13d2be3eb28f6563a1706edea07ca7e3a3291c113dd52fed3f56b6dd96d449e91023a1639d45350", 0xc9}, {&(0x7f0000000140)="9b7c2a37ec2e52e1164abc9385025f8ede40e3597dc63bef", 0x18}], 0x3, &(0x7f0000000300)=[{0x30, 0x88, 0x3f, "dfb968d42f958b90b1de5bc2a789816e35a5e08e7c3467e4df18e60caefe"}, {0xe0, 0x1, 0x200, "1d14fce2b66da372e98ab3dd4dcc9df6ad016365387a744c7f8c6268a5a90a3f2965aeee440f5f5c5c9d76ace257930b31934cb3e46cd61f5a16dc6f12b2ea30f2dc2c2bc42235404572f8f74fa2e2da3a2ee3c084b4cca4ade2317d06d049321b868b504bde0cffcd0975764357b6b015ef254e2237604bde82f1c8f3392968db1504812f779f34c118be0944484fa7148392cb3f5ae4644b87bb4f38e067169b1570a9479a7dc7f415698c6b85bba684d317df02183d334e839124656b344221910a17d66242e45064b0"}, {0x18, 0x102, 0x1000, "b630"}, {0xf8, 0x117, 0x2, "7a7d84b234ca44d3e2044441e385d36eb464bc91e9cf177bcdf132811af4a2f361f36fddd894517cc43b856e651930f57342f62f0bc1c6ca0c04de873ae67d9ece3c27b323a4b65f5bf7129e0522642ea98c35757c048e2c196da2d5e633fa376fa41108893ea2459acd657ae0a4dc373b490a4150842d21e5346ef6b1489ca437f078eace858ed0fc13a52148039e288959621a4696461e1107bc7f6d2815e148f29a868c8246162fd9de64d8f7ae2e74b243b35713722904551f536b1b38ee767172adaa1f99050e3658dad997c67be0238f9a1a85b73732928922914ecbd50c8425"}], 0x220}}, {{&(0x7f0000000540)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-aes-aesni\x00'}, 0x80, &(0x7f0000000880)=[{&(0x7f00000005c0)="dd3e0fc50b7df65932976edf7ca7456700ca1cdb58f5eede27951eda2e6c9d5ad55b1eac0e45c5111d43a7d76fb11b50c97100b69fd3cabe2268dbde0acefd452b8e21b4d585289527d77e23c963ae4873adbcae3160c218f7bc54516103ed1f3fef83ec1ce11bf7d34beaeba8f0f9c7c9eeb018c2db550b81c293fd4dbabbf3e1f8994fb15cdab310c3e7ce863198f4a1bfeda9ec7d2adb370b6eb2d265a4b3ab02dcb164c46a5be8f676a61ee54badb18d6c99b9bf77e30df301699ac8b00075c8c6b4c8bae1a25fb6", 0xca}, {&(0x7f00000006c0)="0f56b424daf397e883f9c90b6979a738fa8d9afef9722b3e175b8d50160cdf7f8af55f2317c7be308f6724fa2d7a8a493a3880741af843e47047699ab72d1431048036ce5f6d8664403e0f173bdbb62e23bbc9facc0977bfbc40759a76cdff424408b2ca7fa3b92ad639db7baaaf2d931536ee68a87418f3d3214e4f47ce47134df08f4f426584f7b9d58c4564f40f34cd025ec310dacdb1e79101fcbae3d404b50ec903b96d089f50ac60cbb6502f2d8c75cd367d526da9abaa6c864eb4c67f67af5de7", 0xc4}, {&(0x7f00000007c0)="2d8af12c2fd4fe6c", 0x8}, {&(0x7f0000000800)="c8ea1401e4d9f73ff1a5440f4c390c4c2152793f0464886920ba43ed88442307afdc5b19a10e36c4050f2760a43e81fbab38e46dd8bd52f883e8fa838f5ca5b432ec5f23fed9380726ea", 0x4a}], 0x4, &(0x7f00000008c0)=[{0x1010, 0x110, 0x9785, "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"}, {0x30, 0x113, 0x2a, "0bb9de5000f4670df178407b7473f1213a25ea5f833be52a7ce9a0fc"}, {0xc8, 0x102, 0xdec, "55df4ffed156ae03db6b7e8e3087fd98218cd9cca22ebccf05987883fb119ee003837804648ff29d553d37f1d3818ff3a85c4c35e322ec9471a52c70130e940097aa9101e490722c4122bc1a2f5a30c281490e14df84adfdc561cf4eeefe84467b894984abc9ef7a2996a94d6a081ed5c2cb3586b6bc348be70c8769dbad0221bb19418ab66f65b4e65f4fea0e8546b811d660e50ef3e40f630f5b9d883a29f769ff67377de4cf28b55dd35c1446eab19e3ed7bae6207c64"}], 0x1108}}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000001a00)="a61f3447191ec45b071f3f2c51cfa0d0aa2e803e36c1dbf19477cb62ef1cb5ac6a948fdbca8b3888a9b0c59f17005cafe195fa1c87bda27f02b8a62d3f6a3a898ee241a561d49ac45ca94a7d6f237ea08b0935bf9e41c5048c624414c392f8a77654979712cf9955ca8fe17f681ec67769e99e0890", 0x75}, {0xfffffffffffffffd}, {&(0x7f0000001a80)="c17692929899b2dbbb0928020c64edc847ad6d84eccb83fea3d3b9ca2171bd89", 0x20}, {&(0x7f0000001ac0)="6d7e0637c21afa80c4d5c48c66fae9a56fb4348c29a396cf2f1af2ffd0985c1428e2e98512843f86fed2bd33f1ef568165fc293d2ba6992b9aa4d43da4637166c0e3b187a9e99d98c8fa5691d7fe372ff8e4454bc36b9070667dafbf524470167664f4844aa8bd4eb8bf31195e0deb0a31f17a4e629eacd92915822370c6350083bd04a91692", 0x86}], 0x4, &(0x7f0000001bc0)=[{0x28, 0x114, 0x6, "2a30346da4422f6ad3742dbeac3723d1f8440bf894ec"}], 0x28}}, {{&(0x7f0000001c00)=@pppoe={0x18, 0x0, {0x1, @dev={[], 0x1b}, 'bridge0\x00'}}, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001c80)}, {&(0x7f0000001cc0)="fd74db844fcde26dad77e262792d5280f1854f30db0204b560836e327f5c85d368e12a197c03193c48e10a21f9cd78c3159c7cb8fa7b7ba76017", 0x3a}, {&(0x7f0000001d00)="8097db84d8def3d18a21cf7599f40cc5b7f57b9f594ff4c722f3919392fe726ca18152158fad1c9a33be0c90550ecf4de8aa72dc2d6ed1746a20bf51a4971cc69474912ad4d5389a102b17017ec71f8b961a147409f3f8b2774da8545738cd861df6688bc64db5151c306c29", 0x6c}, {&(0x7f0000001d80)="bd817e83ca4616dd430575f4bc006b9455e5def49b097be03690997a3609cf16200f0803bcbaecf3d0b3c7655df5a5e12a4b76af0e93309ca52227ff9389d1011bc17d0d839783e3b27b0d0485f16ef3e6b183442a5bbda040dd810d0badf9c846619068687eb312462abf76e578d9d17e2ed9bc1580601abb148aae6526228532dc0b676862feb1d71e831bf5ee0f498c335707a55741dd8d9440d850ab941551ea2022e4b9977d34978fad32baaeb79fbe5e6bcf36f062c36177bd21751266913218ea3cb3973e44b5407a2c52cba062e6825d4d983697d480ce0d88995205a0b360f78fcea88f02bc82e9a08f", 0xee}], 0x4, &(0x7f0000001ec0)=[{0x50, 0x116, 0x5, "da0e4f40de3d3a5282912f5c1ce42f0e2f3dc145fd17a06a04954f859cdb16c2a8e6ac57ecfa520f1c1f41a2a77bdb64d71f997b36d603c190ada657"}, {0xf0, 0x84, 0x6, "0e91c1737924a10223d1e651d7f9e8777fb602582b54d19b72ac266392dd7824d82bd1a7c90796ca565fa47dd1e3fa4c0366397efa6957e6c779520d6a069d0d054404ed49ee055cea7f5e2293e5cfbd55ad04ac745b929e5f3fa5fe1b0611572a3f7d7d2c795a029280ada5c72155d50f251e96c03ee74b17053c24141c27e5f13e4ff01f66cc64c816d8408fa792c3170681cb67cd14425df1885c3774c56edaa998f9c950311350282f252ec7be85388ee4d06ec1791a238bf783959c7b0482853caa2683cb95af1acf6d0dc1ac7fbe8d67123f4bf74fa2"}, {0x58, 0x117, 0x7, "320420fa07fbd5144d7dc81d816ee339f1f47a3db7a7f26656e6b907ccf0173699a19e0afc09735eaf7529b2f3d0761d88c02e3abd338ffacf39c6b769f60280496e0898d71067"}, {0xc0, 0x10a, 0x9a, "3e2663d196ad4de70309540722f46bee390bad2dd747b24c30e883b552981ee5932784ea12e7f49500903b63319b2f570e0eac63c4976c0fecc2da6f69d93acdba38839f8b5b9e9068b766778d9c4ad284120a8eeab5fee69b56beae53d0513922e0ef777cfe6215d96ecf7f6fe4ca18a433c579e7776b8100f9c5e24fef3ba7dec6532878dab94319a9a65a729e68ebf610a9d1bdb2314d3b3962ed55729b88472c0d6c3b457f7453"}, {0xa0, 0x107, 0x2, "1d69f250ecf37a681f60df699bf57ad6095dad9f8269d1e166730899847cf93a9092f50c3346116942eec59d145b9238e382adef5467ed4653084ce5dd1269cc63cdbc1437de58d3fa97d0ce0be4ae99b94d157eba21846d20eb097eca25198b3bf02f2883bd07cbe5b4c94cf0a90515056a337488253f7a4529ccbcbfe8b6f86b3beae1dc0c7f473dbb5df001f380bb"}, {0xf0, 0x111, 0x10000, "d1971097281c5d3e99dc6b1da0f68805a1b84c8b5c9b55bb9bf3a09bc39b9dbe56960d604d990fe432d22f1cd32be33f5cb703726b77027d7dd82a38435f7b6896aa704601ce40fc0f1928cec4f132dc4f360e16e6f6d1cf59322c78b2de75d967ec1043e5adcbec11376be5197531e8bdc0ed9e1979a066165ace23001929309aae45a2052e8b755e08a15fc636e1ca139ea085311328918838c896a5ed144969aa0aac08508f6f9cd3267bad654898dc2cb5a66ce8184da81da06a1a2d9cf1c812e084ae07cade9c3c9068a711e083bc82cc0cf191d7e92f4fae1f017e5668"}, {0xc8, 0x119, 0x6a, "97ceeafbf67c1b46f33a74b199450382c886296588d804e824f9957ea7423790b58739dd1ef8fbe22dd56a4442a23173409461763fac657a62a44ea1ec847756ee5bb983527d1bf772358da5e4c20e924d6f5b3b4d6b63673702e4116940b29aa21c9a4822ce2e0fd25c6dd164c680a05b613b056161419c009cf4b86aaff0dacc822faefc48dc87bfe410e1c67f07ea54fd3f4a8df086678690e521660f20b072ef54d10e60016e1bdfe8cf8e07aefbd2649ecdc123"}], 0x4b0}}, {{&(0x7f0000002380)=@l2tp6={0xa, 0x0, 0x81, @local, 0x1, 0x2}, 0x80, &(0x7f0000003400)=[{&(0x7f0000002400)="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", 0x1000}], 0x1}}], 0x5, 0x20000081) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xe94293bafad1bdd0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x82) sendfile(r1, r0, 0x0, 0xa198) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000001580)=ANY=[], 0x119) sendfile(r3, r2, 0x0, 0xa198) [ 1153.266564][T18199] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 1153.333166][T18199] device macsec1 entered promiscuous mode [ 1153.343034][T18199] device virt_wifi0 entered promiscuous mode 20:26:06 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0x9e, 0x0) [ 1153.382313][T18199] device virt_wifi0 left promiscuous mode [ 1153.526303][ T28] audit: type=1804 audit(1590265566.853:845): pid=18206 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir984313495/syzkaller.4Sv1HN/1014/file0" dev="sda1" ino=15955 res=1 [ 1153.688719][ T28] audit: type=1804 audit(1590265566.883:846): pid=18206 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir984313495/syzkaller.4Sv1HN/1014/file0" dev="sda1" ino=15955 res=1 20:26:07 executing program 4: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x82) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000340)=[&(0x7f0000000080)='#L$]@+%^bdev#nodevcpuset\x00', &(0x7f00000000c0)='nodevem1%)/\x00', &(0x7f0000000100)='\x00', &(0x7f0000000140)='\x00', &(0x7f0000000180)='\x00', &(0x7f0000000200)='{#vboxnet0(\'\x00', &(0x7f0000000240)='ppp1eth1vboxnet0!\x00', &(0x7f0000000280)='lo\x00', &(0x7f00000002c0)='\x00', &(0x7f0000000300)='(\x00'], &(0x7f0000000440)=[&(0x7f00000003c0)='vboxnet0{lolo\x00', &(0x7f0000000400)='\x00']) dup(r0) sendfile(r1, r0, 0x0, 0xa198) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r3, r2, 0x0, 0xa198) 20:26:07 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0x9f, 0x0) 20:26:07 executing program 1: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000180)={&(0x7f0000000100)="7c004e0f7eb6f0ae50030f1c62c166400f3a0fab0a00000004dfc5c4027d3fe566470f113b660f2f785f670f2ba80e0000002599899999", 0x4, &(0x7f0000000140)="f2df590bc46125767452e7875c3051c4e1f810f9c4e2fd1c43c1c1e3ab6546d3c63e42e200c402a947cdc4a2399ae3", {[0x1]}}, &(0x7f0000000240)={&(0x7f00000001c0)="c4a10dd5961d000000c481235c1cb42667f20f12f5f3436f42a4c4017c5aff3c2ac44178511e400f13ae00000000c481fc510b", 0x0, &(0x7f0000000200)="3e410f01d845894d07c461ff123bf0f69504000000c46331782f1ac44175facb460f6f14a9f0440fb32f450fe4167600"}, 0x8, &(0x7f0000000280)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a5377986fc254ec2862883ce7257cd4f7ae2dcfdaef81c581d1b4223e49887ee68e87ed537d5b2e957e1fac165be3eb34c5174f6279277376cbe5d10966df793456b54921f664921e1615264cc762c189704152109b0dff9eb9ca92da732cc5b46ffffff7f025485dc560b67fa9950386e7d44374265b739aa0ef8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c091b75999c66551d206c48cab1b787530de3629da0b37b211578542ae70ac9e8c0dbe754a77abd06c"], 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) 20:26:07 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x6, 0x0, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086201, &(0x7f0000000280)=0x5) ioctl$VIDIOC_G_JPEGCOMP(r3, 0x808c563d, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}, 0x1}, @in={0x2, 0x0, @empty}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}], 0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r4}) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x5c}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(0x0, 0x1, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r8 = socket$inet6(0xa, 0x80005, 0x0) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r8, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c) r9 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x0, 0x400400) r10 = gettid() syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') accept4$vsock_stream(r9, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @hyper}, 0x10, 0x80000) getgid() ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000240)) writev(r5, &(0x7f0000000080), 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) ioprio_get$pid(0x2, r10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000000000)) tkill(r10, 0x1004000000016) fgetxattr(r5, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x0, 0x0) close(r7) dup2(r9, r6) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0xbba}, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000007c0)={[{0x7, 0x3, 0x0, 0xe2fe, 0xffffffffffffff81, 0x4, 0x4, 0xffffffffffffb1b0, 0x10000, 0x0, 0x6, 0x2}, {0x1, 0x7, 0x8, 0x8, 0x0, 0x0, 0x8, 0xd3, 0x1, 0x0, 0x3f}, {0x10000, 0x3f, 0x2, 0xea7, 0x5, 0x20, 0x4, 0x1, 0x80000001, 0x0, 0x8245, 0x0, 0x2}]}) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) timer_delete(0x0) 20:26:07 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0xa0, 0x0) 20:26:07 executing program 2: mkdir(&(0x7f0000000240)='./file0\x00', 0xc4) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'ipvlan1\x00', 0x1000}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x1, &(0x7f0000001300)=ANY=[@ANYRES16, @ANYRESHEX=r2, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030307de7303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB="3e67726f75765f6f633db79124eafb8575e24d79a6f1795fed414af2", @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000000300), 0x1000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r3, 0x0, r3) prctl$PR_MCE_KILL_GET(0x22) statfs(&(0x7f00000001c0)='./file0\x00', 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x2) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r6 = dup2(r5, r5) ioctl$EVIOCGPROP(r6, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r6, 0xc0385720, &(0x7f0000000280)={0x1}) dup3(r4, r2, 0x0) [ 1154.543593][T18235] fuse: Unknown parameter 'ÿÿ0x0000000000000004' [ 1154.571483][T18233] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 1154.695768][T18233] device macsec1 entered promiscuous mode [ 1154.701809][T18233] device virt_wifi0 entered promiscuous mode [ 1154.772213][T18233] device virt_wifi0 left promiscuous mode 20:26:08 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0xa1, 0x0) 20:26:08 executing program 4: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x82) sendfile(r1, r0, 0x0, 0xa198) open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x400000000000030, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x400000000000030, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) recvfrom$netrom(r0, &(0x7f0000000200)=""/179, 0xb3, 0x120, &(0x7f0000000140)={{0x3, @default, 0x7}, [@bcast, @null, @null, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast]}, 0x48) sendfile(r2, r2, 0x0, 0x4000a198) r4 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r4, 0xc0046686, &(0x7f0000000080)={0x2, 0xa3, "c695ded33a6434f9d69dbb7186792271050fbf19680ad681879bc5023f949a51c3968453f197824db7f02ccf60708152aad5ce2dc46f4fee378bba1ac87a96840fb96ea17a26622559efd28690101b87624c3f0cd818036fc4501c8fea507487454b2d059ac3b2f000b11b833bfd5488f72a932885996f7b0fece5134574f71102a1d6b1131c22ead1f892a0fdfb950a9b3eee5e1d0597e3cfb95e633fba7a23bccd94"}) 20:26:08 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0xa2, 0x0) 20:26:08 executing program 1: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000180)={&(0x7f0000000100)="7c004e0f7eb6f0ae50030f1c62c166400f3a0fab0a00000004dfc5c4027d3fe566470f113b660f2f785f670f2ba80e0000002599899999", 0x4, &(0x7f0000000140)="f2df590bc46125767452e7875c3051c4e1f810f9c4e2fd1c43c1c1e3ab6546d3c63e42e200c402a947cdc4a2399ae3", {[0x1]}}, &(0x7f0000000240)={&(0x7f00000001c0)="c4a10dd5961d000000c481235c1cb42667f20f12f5f3436f42a4c4017c5aff3c2ac44178511e400f13ae00000000c481fc510b", 0x0, &(0x7f0000000200)="3e410f01d845894d07c461ff123bf0f69504000000c46331782f1ac44175facb460f6f14a9f0440fb32f450fe4167600"}, 0x8, &(0x7f0000000280)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810d00001c0012000b0001006d616373656300e10b00020005000700010000000a000540340000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7cf68a72e18b043723262ef1db55855e9b9c3c4f3d85375cfa53566d1bccb85f7297cb07953a21aa4f222f0b3883bb31e8a8f15e68f55716d40aae2130362bc729067a2c1827fb817eec56022b28d49a32965d048e336c6476967ed3c42524afa00cc95b8b1bd067d02f67da010df77addc64711eb3b771464ded7467a586a825be4a7edbb278663c325af5e83e40a3b1b721b5fd06c0500279efe41749bfb87684800f3b4768d6ebe10ee82f6b2e7f55de781d27c9588c2cc3b1730589391f51ebe1ecba1b7d5ba1cc81386ee9fc11ef8c33b3a79f3f9187c9761c15d000000000000000000000000000000e81c0509f83a199089942b308c3f9e1da97bcaa66b4b31cdd2ef42d2bb7b42726a279c5019f4b408633cfce834beb5a343515af9401a8664936c62df130169b7670895897fb13eec0ff09e2e6311dc077a745b63a8fd0000000000000000000000000000c7ae7ad999ddf278dd38f2582244284cdae195f79b6d18165efd92b6946a0965730fbdbdf0f9a37b4b7fe70fd4c82805a286eba1c588a555a6f66035510a89296ff08d3a09d516182d1224d920f4fef3703549e2dfdfe9cdbf518b9ce90be973ede58d65bb60d88308021fcc32653dd4d5c701fcc5080d9d64c91fbd4e3fdfe37b256473ed39500cc751414400dcafb7be350a6a2dfc7991ede5", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a5377986fc254ec2862883ce7257cd4f7ae2dcfdaef81c581d1b4223e49887ee68e87ed537d5b2e957e1fac165be3eb34c5174f6279277376cbe5d10966df793456b54921f664921e1615264cc762c189704152109b0dff9eb9ca92da732cc5b46ffffff7f025485dc560b67fa9950386e7d44374265b739aa0ef8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c091b75999c66551d206c48cab1b787530de3629da0b37b211578542ae70ac9e8c0dbe754a77abd06ce242"], 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) [ 1155.488553][T18268] fuse: Unknown parameter 'ÿÿ0x0000000000000004' [ 1155.613751][T18277] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 20:26:09 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x6, 0x0, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086201, &(0x7f0000000280)=0x5) ioctl$VIDIOC_G_JPEGCOMP(r3, 0x808c563d, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}, 0x1}, @in={0x2, 0x0, @empty}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}], 0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r4}) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x5c}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(0x0, 0x1, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r8 = socket$inet6(0xa, 0x80005, 0x0) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r8, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c) r9 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x0, 0x400400) r10 = gettid() syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') accept4$vsock_stream(r9, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @hyper}, 0x10, 0x80000) getgid() ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000240)) writev(r5, &(0x7f0000000080), 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) ioprio_get$pid(0x2, r10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000000000)) tkill(r10, 0x1004000000016) fgetxattr(r5, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x0, 0x0) close(r7) dup2(r9, r6) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0xbba}, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000007c0)={[{0x7, 0x3, 0x0, 0xe2fe, 0xffffffffffffff81, 0x4, 0x4, 0xffffffffffffb1b0, 0x10000, 0x0, 0x6, 0x2}, {0x1, 0x7, 0x8, 0x8, 0x0, 0x0, 0x8, 0xd3, 0x1, 0x0, 0x3f}, {0x10000, 0x3f, 0x2, 0xea7, 0x5, 0x20, 0x4, 0x1, 0x80000001, 0x0, 0x8245, 0x0, 0x2}]}) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) timer_delete(0x0) 20:26:09 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0xa3, 0x0) [ 1155.772204][T18277] device macsec1 entered promiscuous mode [ 1155.809079][T18277] device virt_wifi0 entered promiscuous mode 20:26:09 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r1 = dup2(r0, r0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, r2, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_FD={0x8, 0x17, @udp6=r4}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x2400c044}, 0x80) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[]) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) statfs(&(0x7f00000001c0)='./file0\x00', 0x0) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000380)) umount2(&(0x7f0000000080)='./file0\x00', 0x2) r8 = socket$inet6(0xa, 0x2, 0x0) dup3(r8, r5, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000300)=0x7) [ 1155.891164][T18277] device virt_wifi0 left promiscuous mode 20:26:09 executing program 4: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x82) sendfile(r1, r0, 0x0, 0xa198) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r3, r2, 0x0, 0xa198) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r5 = dup2(r4, r4) ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$KVM_SIGNAL_MSI(r5, 0x4020aea5, &(0x7f0000000000)={0x2, 0x1000, 0x800, 0x1, 0x3}) [ 1156.205106][T18298] fuse: Unknown parameter '' 20:26:09 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0xa4, 0x0) 20:26:09 executing program 1: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000180)={&(0x7f0000000100)="7c004e0f7eb6f0ae50030f1c62c166400f3a0fab0a00000004dfc5c4027d3fe566470f113b660f2f785f670f2ba80e0000002599899999", 0x4, &(0x7f0000000140)="f2df590bc46125767452e7875c3051c4e1f810f9c4e2fd1c43c1c1e3ab6546d3c63e42e200c402a947cdc4a2399ae3", {[0x1]}}, &(0x7f0000000240)={&(0x7f00000001c0)="c4a10dd5961d000000c481235c1cb42667f20f12f5f3436f42a4c4017c5aff3c2ac44178511e400f13ae00000000c481fc510b", 0x0, &(0x7f0000000200)="3e410f01d845894d07c461ff123bf0f69504000000c46331782f1ac44175facb460f6f14a9f0440fb32f450fe4167600"}, 0x8, &(0x7f0000000280)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810d00001c0012000b0001006d616373656300e10b00020005000700010000000a000540340000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7cf68a72e18b043723262ef1db55855e9b9c3c4f3d85375cfa53566d1bccb85f7297cb07953a21aa4f222f0b3883bb31e8a8f15e68f55716d40aae2130362bc729067a2c1827fb817eec56022b28d49a32965d048e336c6476967ed3c42524afa00cc95b8b1bd067d02f67da010df77addc64711eb3b771464ded7467a586a825be4a7edbb278663c325af5e83e40a3b1b721b5fd06c0500279efe41749bfb87684800f3b4768d6ebe10ee82f6b2e7f55de781d27c9588c2cc3b1730589391f51ebe1ecba1b7d5ba1cc81386ee9fc11ef8c33b3a79f3f9187c9761c15d000000000000000000000000000000e81c0509f83a199089942b308c3f9e1da97bcaa66b4b31cdd2ef42d2bb7b42726a279c5019f4b408633cfce834beb5a343515af9401a8664936c62df130169b7670895897fb13eec0ff09e2e6311dc077a745b63a8fd0000000000000000000000000000c7ae7ad999ddf278dd38f2582244284cdae195f79b6d18165efd92b6946a0965730fbdbdf0f9a37b4b7fe70fd4c82805a286eba1c588a555a6f66035510a89296ff08d3a09d516182d1224d920f4fef3703549e2dfdfe9cdbf518b9ce90be973ede58d65bb60d88308021fcc32653dd4d5c701fcc5080d9d64c91fbd4e3fdfe37b256473ed39500cc751414400dcafb7be350a6a2dfc7991ede5", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a5377986fc254ec2862883ce7257cd4f7ae2dcfdaef81c581d1b4223e49887ee68e87ed537d5b2e957e1fac165be3eb34c5174f6279277376cbe5d10966df793456b54921f664921e1615264cc762c189704152109b0dff9eb9ca92da732cc5b46ffffff7f025485dc560b67fa9950386e7d44374265b739aa0ef8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c091b75999c66551d206c48cab1b787530de3629da0b37b211578542ae70ac9e8c0dbe754a77abd06ce242"], 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) [ 1156.490931][T18293] fuse: Unknown parameter '' 20:26:09 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x6, 0x0, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086201, &(0x7f0000000280)=0x5) ioctl$VIDIOC_G_JPEGCOMP(r3, 0x808c563d, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}, 0x1}, @in={0x2, 0x0, @empty}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}], 0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r4}) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x5c}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(0x0, 0x1, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r8 = socket$inet6(0xa, 0x80005, 0x0) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r8, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c) r9 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x0, 0x400400) r10 = gettid() syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') accept4$vsock_stream(r9, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @hyper}, 0x10, 0x80000) getgid() ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000240)) writev(r5, &(0x7f0000000080), 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) ioprio_get$pid(0x2, r10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000000000)) tkill(r10, 0x1004000000016) fgetxattr(r5, &(0x7f0000000840)=ANY=[@ANYBLOB="a50500714f7f7100d340200007d2644a6dc2ebdbd5db1f0867e0c40e01380ec99c6dcf2b0bef2533fdea38cd4ecd9f1d377a4a4aff9ec836959ff1a0191bd4bad0b8fe12bb4d78471a2f990c3776675c0dcdab4b39f584bca23a7a2fc19b27bc9b71e8ae59f42a718a3dec8d4374db63d9d795b0ff05c117aa5702290b3103bc28aec5801bb39ebdd5c3be0000000080000000e59b3dbaf1eb15fced2d000000000000000000000040000000000d2e45dfffb6c050f46226daadc63659168a50dda734148a8fe4d5b99b43e2edb3fe3e754d26bc8c16c313ea9c5bbd35d600702cfce25becac92fde18fa3701cb6b04eb84375191fd8b6ed74e535c990d82524dd5f8997e0930060bda93c57d6a9597a9ba79eb57071b5a49b61ec0fc5fee99c8d4984c400c7fef3cbec8abd2f191c94c41ae90c000000000000cf5406b34abd6f3ae8dc2fea6e5ed50649b862a7f665f095e1fd41b083596db8162f405d241c5bf97c009e6a702ce6408bc1cbd4e0c86692a484a9ad8959fb62f028a0dd925761dc08f1ae0ec4888ac7a64e36bd4093e555efee1780107e0e7039b3d3fc0290f93b7222de47e4a1e9f757ac6c5b9dc9ba4b2ebbc92a6e6c3f27f1b797634d06000000d8836651ba9beb008377323cdd69e464db54236c5663421c20f1142589c9b30fb74b378300000000000000000000f9d7ec43bed2988d5dd4fc8dc9841bfbf39d6968a1e41654fa965fe3e38cabc0e4fd7b1f04c0f69baae5767ece069beaf6dc87c4a0fd11d838c0dac7f5457f7531442cb4e1c48638768969c107039ce237c49bf5ca2862750ea66d48f1f2785cb81ec94a1f57dbbf9608b016decfd66f2d94b381c8ffc593a993d6861deca12cda5faf0ff4cd169ae7c52e2f872e1cc8488f6043c528f40c66c42c754e70dc9817c930f52e2fcf1f7b7c25f77ab96fc06baeec662d46ab333610c123394df2b4a9a57e13ec4dd6115488719f6e8384f25a97ee11e3a44ff524185bd4084146507c2735fdf427dd60220a66ebb5ac78ffe5646cf149a16fe3e5e1cba005ab2954d8c3f8ade1ddf979dd99ae3326b4383ea8cc41dfa1619df8bdbb186849df5891cb4d70000000001c9d85747b4617e35bfad5bbe3003cbfaa3eaa7e68ab928032a1338613f3ddb320f74a9a166d9075b6432401938c33c7f13db04c3599e7ced7b59f5f9f821d06889346b3a982253f3523ece1c9a1517b455206ad6f65aa5aa3f324e9b6d090f2d67e7452c450eceda06fd77a3dd2e085541caa961529f246a2d344b1e9c01b0efb78179a28042c79bc26f71f3766f745ecad7ba420b2556ddcf29d01626288174d54b0ef8cac5e2e33b3fa2c7782a66b2a6ce0a1c668f86d6235782e8b8a5c201e1154ef4f37657e9cc8d616c2bd8d9dba80f7048c93961619459863a05cb640b1b17ed290ec4fd2b190f37a8d63ef3088f5ccd137d66f5cb45d6beddeb4f8f3d4918840d8c0b804e3738b64fd8bbf3fd74b8e8411918ccf495fea0bf1611903da79ad10f2a73299"], 0x0, 0x0) close(r7) dup2(r9, r6) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0xbba}, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000007c0)={[{0x7, 0x3, 0x0, 0xe2fe, 0xffffffffffffff81, 0x4, 0x4, 0xffffffffffffb1b0, 0x10000, 0x0, 0x6, 0x2}, {0x1, 0x7, 0x8, 0x8, 0x0, 0x0, 0x8, 0xd3, 0x1, 0x0, 0x3f}, {0x10000, 0x3f, 0x2, 0xea7, 0x5, 0x20, 0x4, 0x1, 0x80000001, 0x0, 0x8245, 0x0, 0x2}]}) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) timer_delete(0x0) 20:26:09 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0xa5, 0x0) [ 1156.612303][T18320] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 20:26:10 executing program 2: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) statfs(&(0x7f00000001c0)='./file0\x00', 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x2) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r5 = dup2(r4, r4) ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f0000000000)=""/246) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f0000000040)=0x3, 0x4) dup3(r3, r0, 0x0) [ 1156.742129][T18320] device macsec1 entered promiscuous mode [ 1156.788222][T18320] device virt_wifi0 entered promiscuous mode [ 1156.862277][T18320] device virt_wifi0 left promiscuous mode 20:26:10 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0xa6, 0x0) 20:26:10 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0xa7, 0x0) [ 1157.410167][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 1157.410189][ T28] audit: type=1804 audit(1590265570.734:859): pid=18302 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir374862090/syzkaller.5NWs5l/1118/file0" dev="sda1" ino=16244 res=1 20:26:10 executing program 1: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000180)={&(0x7f0000000100)="7c004e0f7eb6f0ae50030f1c62c166400f3a0fab0a00000004dfc5c4027d3fe566470f113b660f2f785f670f2ba80e0000002599899999", 0x4, &(0x7f0000000140)="f2df590bc46125767452e7875c3051c4e1f810f9c4e2fd1c43c1c1e3ab6546d3c63e42e200c402a947cdc4a2399ae3", {[0x1]}}, &(0x7f0000000240)={&(0x7f00000001c0)="c4a10dd5961d000000c481235c1cb42667f20f12f5f3436f42a4c4017c5aff3c2ac44178511e400f13ae00000000c481fc510b", 0x0, &(0x7f0000000200)="3e410f01d845894d07c461ff123bf0f69504000000c46331782f1ac44175facb460f6f14a9f0440fb32f450fe4167600"}, 0x8, &(0x7f0000000280)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a5377986fc254ec2862883ce7257cd4f7ae2dcfdaef81c581d1b4223e49887ee68e87ed537d5b2e957e1fac165be3eb34c5174f6279277376cbe5d10966df793456b54921f664921e1615264cc762c189704152109b0dff9eb9ca92da732cc5b46ffffff7f025485dc560b67fa9950386e7d44374265b739aa0ef8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c091b75999c66551d206c48cab1b787530de3629da0b37b211578542ae70ac9e8c0dbe754a77abd06ce242"], 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) 20:26:10 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, &(0x7f0000000000)) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r3, &(0x7f0000000480)=ANY=[], 0x82) sendfile(r3, r2, 0x0, 0xa198) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r5, r4, 0x0, 0xa198) [ 1157.603284][ T28] audit: type=1804 audit(1590265570.734:860): pid=18299 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir374862090/syzkaller.5NWs5l/1118/file0" dev="sda1" ino=16244 res=1 [ 1157.657198][T18360] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 20:26:11 executing program 2: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) statfs(&(0x7f00000001c0)='./file0\x00', 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x2) r3 = socket$inet6(0xa, 0xa, 0x2) dup3(r3, r0, 0x0) 20:26:11 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x6, 0x0, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086201, &(0x7f0000000280)=0x5) ioctl$VIDIOC_G_JPEGCOMP(r3, 0x808c563d, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}, 0x1}, @in={0x2, 0x0, @empty}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}], 0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r4}) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x5c}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(0x0, 0x1, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r8 = socket$inet6(0xa, 0x80005, 0x0) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r8, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c) r9 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x0, 0x400400) r10 = gettid() syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') accept4$vsock_stream(r9, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @hyper}, 0x10, 0x80000) getgid() ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000240)) writev(r5, &(0x7f0000000080), 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) ioprio_get$pid(0x2, r10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000000000)) tkill(r10, 0x1004000000016) fgetxattr(r5, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x0, 0x0) close(r7) dup2(r9, r6) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0xbba}, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000007c0)={[{0x7, 0x3, 0x0, 0xe2fe, 0xffffffffffffff81, 0x4, 0x4, 0xffffffffffffb1b0, 0x10000, 0x0, 0x6, 0x2}, {0x1, 0x7, 0x8, 0x8, 0x0, 0x0, 0x8, 0xd3, 0x1, 0x0, 0x3f}, {0x10000, 0x3f, 0x2, 0xea7, 0x5, 0x20, 0x4, 0x1, 0x80000001, 0x0, 0x8245, 0x0, 0x2}]}) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) timer_delete(0x0) 20:26:11 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0xa8, 0x0) [ 1157.776594][T18360] device macsec1 entered promiscuous mode [ 1157.815653][T18360] device virt_wifi0 entered promiscuous mode [ 1157.883613][ T28] audit: type=1804 audit(1590265571.214:861): pid=18372 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir374862090/syzkaller.5NWs5l/1119/file0" dev="sda1" ino=15963 res=1 [ 1157.907569][T18360] device virt_wifi0 left promiscuous mode [ 1157.975895][ T28] audit: type=1804 audit(1590265571.234:862): pid=18372 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir374862090/syzkaller.5NWs5l/1119/file0" dev="sda1" ino=15963 res=1 20:26:11 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0xa9, 0x0) [ 1158.502113][ T28] audit: type=1804 audit(1590265571.824:863): pid=18372 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir374862090/syzkaller.5NWs5l/1119/file0" dev="sda1" ino=15963 res=1 20:26:11 executing program 1: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000180)={&(0x7f0000000100)="7c004e0f7eb6f0ae50030f1c62c166400f3a0fab0a00000004dfc5c4027d3fe566470f113b660f2f785f670f2ba80e0000002599899999", 0x4, &(0x7f0000000140)="f2df590bc46125767452e7875c3051c4e1f810f9c4e2fd1c43c1c1e3ab6546d3c63e42e200c402a947cdc4a2399ae3", {[0x1]}}, &(0x7f0000000240)={&(0x7f00000001c0)="c4a10dd5961d000000c481235c1cb42667f20f12f5f3436f42a4c4017c5aff3c2ac44178511e400f13ae00000000c481fc510b", 0x0, &(0x7f0000000200)="3e410f01d845894d07c461ff123bf0f69504000000c46331782f1ac44175facb460f6f14a9f0440fb32f450fe4167600"}, 0x8, &(0x7f0000000280)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810d00001c0012000b0001006d616373656300e10b00020005000700010000000a000540340000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7cf68a72e18b043723262ef1db55855e9b9c3c4f3d85375cfa53566d1bccb85f7297cb07953a21aa4f222f0b3883bb31e8a8f15e68f55716d40aae2130362bc729067a2c1827fb817eec56022b28d49a32965d048e336c6476967ed3c42524afa00cc95b8b1bd067d02f67da010df77addc64711eb3b771464ded7467a586a825be4a7edbb278663c325af5e83e40a3b1b721b5fd06c0500279efe41749bfb87684800f3b4768d6ebe10ee82f6b2e7f55de781d27c9588c2cc3b1730589391f51ebe1ecba1b7d5ba1cc81386ee9fc11ef8c33b3a79f3f9187c9761c15d000000000000000000000000000000e81c0509f83a199089942b308c3f9e1da97bcaa66b4b31cdd2ef42d2bb7b42726a279c5019f4b408633cfce834beb5a343515af9401a8664936c62df130169b7670895897fb13eec0ff09e2e6311dc077a745b63a8fd0000000000000000000000000000c7ae7ad999ddf278dd38f2582244284cdae195f79b6d18165efd92b6946a0965730fbdbdf0f9a37b4b7fe70fd4c82805a286eba1c588a555a6f66035510a89296ff08d3a09d516182d1224d920f4fef3703549e2dfdfe9cdbf518b9ce90be973ede58d65bb60d88308021fcc32653dd4d5c701fcc5080d9d64c91fbd4e3fdfe37b256473ed39500cc751414400dcafb7be350a6a2dfc7991ede5", @ANYBLOB="6326ffc30340a59af4c3650421f9a5377986fc254ec2862883ce7257cd4f7ae2dcfdaef81c581d1b4223e49887ee68e87ed537d5b2e957e1fac165be3eb34c5174f6279277376cbe5d10966df793456b54921f664921e1615264cc762c189704152109b0dff9eb9ca92da732cc5b46ffffff7f025485dc560b67fa9950386e7d44374265b739aa0ef8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c091b75999c66551d206c48cab1b787530de3629da0b37b211578542ae70ac9e8c0dbe754a77abd06ce2420a"], 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) 20:26:11 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0xaa, 0x0) 20:26:12 executing program 4: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x82) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x204000, 0x1c) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x8000) sendfile(r1, r0, 0x0, 0xa198) r3 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r4, r3, 0x0, 0xa198) [ 1158.620344][ T28] audit: type=1804 audit(1590265571.824:864): pid=18372 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir374862090/syzkaller.5NWs5l/1119/file0" dev="sda1" ino=15963 res=1 [ 1158.691018][T18406] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 1158.859091][T18406] device macsec1 entered promiscuous mode [ 1158.909532][T18406] device virt_wifi0 entered promiscuous mode [ 1158.940296][ T28] audit: type=1804 audit(1590265572.264:865): pid=18420 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir374862090/syzkaller.5NWs5l/1120/file0" dev="sda1" ino=16264 res=1 [ 1159.009726][T18406] device virt_wifi0 left promiscuous mode [ 1159.113897][ T28] audit: type=1804 audit(1590265572.294:866): pid=18420 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir374862090/syzkaller.5NWs5l/1120/file0" dev="sda1" ino=16264 res=1 20:26:12 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0xab, 0x0) 20:26:12 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x6, 0x0, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086201, &(0x7f0000000280)=0x5) ioctl$VIDIOC_G_JPEGCOMP(r3, 0x808c563d, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}, 0x1}, @in={0x2, 0x0, @empty}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}], 0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r4}) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x5c}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(0x0, 0x1, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r8 = socket$inet6(0xa, 0x80005, 0x0) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r8, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c) r9 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x0, 0x400400) r10 = gettid() syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') accept4$vsock_stream(r9, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @hyper}, 0x10, 0x80000) getgid() ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000240)) writev(r5, &(0x7f0000000080), 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) ioprio_get$pid(0x2, r10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000000000)) tkill(r10, 0x1004000000016) fgetxattr(r5, &(0x7f0000000840)=ANY=[@ANYBLOB="a50500714f7f7100d340200007d2644a6dc2ebdbd5db1f0867e0c40e01380ec99c6dcf2b0bef2533fdea38cd4ecd9f1d377a4a4aff9ec836959ff1a0191bd4bad0b8fe12bb4d78471a2f990c3776675c0dcdab4b39f584bca23a7a2fc19b27bc9b71e8ae59f42a718a3dec8d4374db63d9d795b0ff05c117aa5702290b3103bc28aec5801bb39ebdd5c3be0000000080000000e59b3dbaf1eb15fced2d000000000000000000000040000000000d2e45dfffb6c050f46226daadc63659168a50dda734148a8fe4d5b99b43e2edb3fe3e754d26bc8c16c313ea9c5bbd35d600702cfce25becac92fde18fa3701cb6b04eb84375191fd8b6ed74e535c990d82524dd5f8997e0930060bda93c57d6a9597a9ba79eb57071b5a49b61ec0fc5fee99c8d4984c400c7fef3cbec8abd2f191c94c41ae90c000000000000cf5406b34abd6f3ae8dc2fea6e5ed50649b862a7f665f095e1fd41b083596db8162f405d241c5bf97c009e6a702ce6408bc1cbd4e0c86692a484a9ad8959fb62f028a0dd925761dc08f1ae0ec4888ac7a64e36bd4093e555efee1780107e0e7039b3d3fc0290f93b7222de47e4a1e9f757ac6c5b9dc9ba4b2ebbc92a6e6c3f27f1b797634d06000000d8836651ba9beb008377323cdd69e464db54236c5663421c20f1142589c9b30fb74b378300000000000000000000f9d7ec43bed2988d5dd4fc8dc9841bfbf39d6968a1e41654fa965fe3e38cabc0e4fd7b1f04c0f69baae5767ece069beaf6dc87c4a0fd11d838c0dac7f5457f7531442cb4e1c48638768969c107039ce237c49bf5ca2862750ea66d48f1f2785cb81ec94a1f57dbbf9608b016decfd66f2d94b381c8ffc593a993d6861deca12cda5faf0ff4cd169ae7c52e2f872e1cc8488f6043c528f40c66c42c754e70dc9817c930f52e2fcf1f7b7c25f77ab96fc06baeec662d46ab333610c123394df2b4a9a57e13ec4dd6115488719f6e8384f25a97ee11e3a44ff524185bd4084146507c2735fdf427dd60220a66ebb5ac78ffe5646cf149a16fe3e5e1cba005ab2954d8c3f8ade1ddf979dd99ae3326b4383ea8cc41dfa1619df8bdbb186849df5891cb4d70000000001c9d85747b4617e35bfad5bbe3003cbfaa3eaa7e68ab928032a1338613f3ddb320f74a9a166d9075b6432401938c33c7f13db04c3599e7ced7b59f5f9f821d06889346b3a982253f3523ece1c9a1517b455206ad6f65aa5aa3f324e9b6d090f2d67e7452c450eceda06fd77a3dd2e085541caa961529f246a2d344b1e9c01b0efb78179a28042c79bc26f71f3766f745ecad7ba420b2556ddcf29d01626288174d54b0ef8cac5e2e33b3fa2c7782a66b2a6ce0a1c668f86d6235782e8b8a5c201e1154ef4f37657e9cc8d616c2bd8d9dba80f7048c93961619459863a05cb640b1b17ed290ec4fd2b190f37a8d63ef3088f5ccd137d66f5cb45d6beddeb4f8f3d4918840d8c0b804e3738b64fd8bbf3fd74b8e8411918ccf495fea0bf1611903da79ad10f2a73299"], 0x0, 0x0) close(r7) dup2(r9, r6) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0xbba}, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000007c0)={[{0x7, 0x3, 0x0, 0xe2fe, 0xffffffffffffff81, 0x4, 0x4, 0xffffffffffffb1b0, 0x10000, 0x0, 0x6, 0x2}, {0x1, 0x7, 0x8, 0x8, 0x0, 0x0, 0x8, 0xd3, 0x1, 0x0, 0x3f}, {0x10000, 0x3f, 0x2, 0xea7, 0x5, 0x20, 0x4, 0x1, 0x80000001, 0x0, 0x8245, 0x0, 0x2}]}) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) timer_delete(0x0) 20:26:12 executing program 2: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x400000000000030, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESHEX=r1]) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) statfs(&(0x7f00000001c0)='./file0\x00', 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x2) r4 = socket$inet6(0xa, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000080)={r6}, &(0x7f00000000c0)=0xfe42) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0x0, 0x8200, 0x280000, 0x401, r6}, &(0x7f0000000280)=0x10) dup3(r4, r0, 0x0) 20:26:12 executing program 1: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000180)={&(0x7f0000000100)="7c004e0f7eb6f0ae50030f1c62c166400f3a0fab0a00000004dfc5c4027d3fe566470f113b660f2f785f670f2ba80e0000002599899999", 0x4, &(0x7f0000000140)="f2df590bc46125767452e7875c3051c4e1f810f9c4e2fd1c43c1c1e3ab6546d3c63e42e200c402a947cdc4a2399ae3", {[0x1]}}, &(0x7f0000000240)={&(0x7f00000001c0)="c4a10dd5961d000000c481235c1cb42667f20f12f5f3436f42a4c4017c5aff3c2ac44178511e400f13ae00000000c481fc510b", 0x0, &(0x7f0000000200)="3e410f01d845894d07c461ff123bf0f69504000000c46331782f1ac44175facb460f6f14a9f0440fb32f450fe4167600"}, 0x8, &(0x7f0000000280)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYBLOB="6326ffc30340a59af4c3650421f9a5377986fc254ec2862883ce7257cd4f7ae2dcfdaef81c581d1b4223e49887ee68e87ed537d5b2e957e1fac165be3eb34c5174f6279277376cbe5d10966df793456b54921f664921e1615264cc762c189704152109b0dff9eb9ca92da732cc5b46ffffff7f025485dc560b67fa9950386e7d44374265b739aa0ef8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c091b75999c66551d206c48cab1b787530de3629da0b37b211578542ae70ac9e8c0dbe754a77abd06ce2420a"], 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) [ 1159.683910][ T28] audit: type=1804 audit(1590265573.014:867): pid=18441 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir374862090/syzkaller.5NWs5l/1120/file0" dev="sda1" ino=16264 res=1 [ 1159.685949][T18440] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 20:26:13 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0xac, 0x0) 20:26:13 executing program 4: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x82) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r3 = dup2(r2, r2) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000000)=""/246) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0xe, &(0x7f0000000080)={r6}, &(0x7f00000000c0)=0xfe42) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000080)={0x4035, 0x7, 0x202, 0x8001, 0x5, 0x40, 0x589, 0x2d, r6}, 0x20) sendfile(r1, r0, 0x0, 0xa198) r7 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r8 = open(&(0x7f0000000000)='./file0\x00', 0x141042, 0x124) sendfile(r8, r7, 0x0, 0xa198) [ 1159.886020][ T28] audit: type=1804 audit(1590265573.044:868): pid=18437 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir374862090/syzkaller.5NWs5l/1120/file0" dev="sda1" ino=16264 res=1 [ 1159.919804][T18440] device macsec1 entered promiscuous mode [ 1159.951464][T18440] device virt_wifi0 entered promiscuous mode [ 1159.972539][T18440] device virt_wifi0 left promiscuous mode 20:26:13 executing program 2: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000040)=[{{0x3, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x1}}], 0x10) statfs(&(0x7f00000001c0)='./file0\x00', 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x2) r5 = socket$inet6(0xa, 0x2, 0x0) dup3(r5, r0, 0x0) recvmsg$can_raw(r2, &(0x7f0000001540)={&(0x7f0000000300)=@isdn, 0x80, &(0x7f0000000280)=[{&(0x7f0000000380)=""/202, 0xca}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x2, &(0x7f0000001480)=""/166, 0xa6}, 0x0) 20:26:13 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0xad, 0x0) 20:26:13 executing program 1: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000180)={&(0x7f0000000100)="7c004e0f7eb6f0ae50030f1c62c166400f3a0fab0a00000004dfc5c4027d3fe566470f113b660f2f785f670f2ba80e0000002599899999", 0x4, &(0x7f0000000140)="f2df590bc46125767452e7875c3051c4e1f810f9c4e2fd1c43c1c1e3ab6546d3c63e42e200c402a947cdc4a2399ae3", {[0x1]}}, &(0x7f0000000240)={&(0x7f00000001c0)="c4a10dd5961d000000c481235c1cb42667f20f12f5f3436f42a4c4017c5aff3c2ac44178511e400f13ae00000000c481fc510b", 0x0, &(0x7f0000000200)="3e410f01d845894d07c461ff123bf0f69504000000c46331782f1ac44175facb460f6f14a9f0440fb32f450fe4167600"}, 0x8, &(0x7f0000000280)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYBLOB="6326ffc30340a59af4c3650421f9a5377986fc254ec2862883ce7257cd4f7ae2dcfdaef81c581d1b4223e49887ee68e87ed537d5b2e957e1fac165be3eb34c5174f6279277376cbe5d10966df793456b54921f664921e1615264cc762c189704152109b0dff9eb9ca92da732cc5b46ffffff7f025485dc560b67fa9950386e7d44374265b739aa0ef8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c091b75999c66551d206c48cab1b787530de3629da0b37b211578542ae70ac9e8c0dbe754a77abd06ce2420a"], 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) 20:26:14 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0xae, 0x0) 20:26:14 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x6, 0x0, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086201, &(0x7f0000000280)=0x5) ioctl$VIDIOC_G_JPEGCOMP(r3, 0x808c563d, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}, 0x1}, @in={0x2, 0x0, @empty}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}], 0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r4}) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x5c}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(0x0, 0x1, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r8 = socket$inet6(0xa, 0x80005, 0x0) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r8, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c) r9 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x0, 0x400400) r10 = gettid() syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') accept4$vsock_stream(r9, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @hyper}, 0x10, 0x80000) getgid() ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000240)) writev(r5, &(0x7f0000000080), 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) ioprio_get$pid(0x2, r10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000000000)) tkill(r10, 0x1004000000016) fgetxattr(r5, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x0, 0x0) close(r7) dup2(r9, r6) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0xbba}, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000007c0)={[{0x7, 0x3, 0x0, 0xe2fe, 0xffffffffffffff81, 0x4, 0x4, 0xffffffffffffb1b0, 0x10000, 0x0, 0x6, 0x2}, {0x1, 0x7, 0x8, 0x8, 0x0, 0x0, 0x8, 0xd3, 0x1, 0x0, 0x3f}, {0x10000, 0x3f, 0x2, 0xea7, 0x5, 0x20, 0x4, 0x1, 0x80000001, 0x0, 0x8245, 0x0, 0x2}]}) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) timer_delete(0x0) 20:26:14 executing program 2: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) statfs(&(0x7f00000001c0)='./file0\x00', 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x2) socket$inet6(0xa, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x400000000000030, 0x0) dup3(r3, r0, 0x0) [ 1160.794820][T18480] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 1160.931176][T18480] device macsec1 entered promiscuous mode 20:26:14 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0xaf, 0x0) [ 1160.996099][T18480] device virt_wifi0 entered promiscuous mode [ 1161.067727][T18480] device virt_wifi0 left promiscuous mode 20:26:14 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0xb0, 0x0) 20:26:15 executing program 1: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000180)={&(0x7f0000000100)="7c004e0f7eb6f0ae50030f1c62c166400f3a0fab0a00000004dfc5c4027d3fe566470f113b660f2f785f670f2ba80e0000002599899999", 0x4, &(0x7f0000000140)="f2df590bc46125767452e7875c3051c4e1f810f9c4e2fd1c43c1c1e3ab6546d3c63e42e200c402a947cdc4a2399ae3", {[0x1]}}, &(0x7f0000000240)={&(0x7f00000001c0)="c4a10dd5961d000000c481235c1cb42667f20f12f5f3436f42a4c4017c5aff3c2ac44178511e400f13ae00000000c481fc510b", 0x0, &(0x7f0000000200)="3e410f01d845894d07c461ff123bf0f69504000000c46331782f1ac44175facb460f6f14a9f0440fb32f450fe4167600"}, 0x8, &(0x7f0000000280)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a5377986fc254ec2862883ce7257cd4f7ae2dcfdaef81c581d1b4223e49887ee68e87ed537d5b2e957e1fac165be3eb34c5174f6279277376cbe5d10966df793456b54921f664921e1615264cc762c189704152109b0dff9eb9ca92da732cc5b46ffffff7f025485dc560b67fa9950386e7d44374265b739aa0ef8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c091b75999c66551d206c48cab1b787530de3629da0b37b211578542ae70ac9e8c0dbe754a77abd06ce2420a"], 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) 20:26:15 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0xb1, 0x0) 20:26:15 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x6, 0x0, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086201, &(0x7f0000000280)=0x5) ioctl$VIDIOC_G_JPEGCOMP(r3, 0x808c563d, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}, 0x1}, @in={0x2, 0x0, @empty}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}], 0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r4}) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x5c}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(0x0, 0x1, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r8 = socket$inet6(0xa, 0x80005, 0x0) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r8, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c) r9 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x0, 0x400400) r10 = gettid() syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') accept4$vsock_stream(r9, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @hyper}, 0x10, 0x80000) getgid() ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000240)) writev(r5, &(0x7f0000000080), 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) ioprio_get$pid(0x2, r10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000000000)) tkill(r10, 0x1004000000016) fgetxattr(r5, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x0, 0x0) close(r7) dup2(r9, r6) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0xbba}, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000007c0)={[{0x7, 0x3, 0x0, 0xe2fe, 0xffffffffffffff81, 0x4, 0x4, 0xffffffffffffb1b0, 0x10000, 0x0, 0x6, 0x2}, {0x1, 0x7, 0x8, 0x8, 0x0, 0x0, 0x8, 0xd3, 0x1, 0x0, 0x3f}, {0x10000, 0x3f, 0x2, 0xea7, 0x5, 0x20, 0x4, 0x1, 0x80000001, 0x0, 0x8245, 0x0, 0x2}]}) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) timer_delete(0x0) 20:26:15 executing program 4: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x82) sendfile(r1, r0, 0x0, 0xa198) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x7f1b25321be42635) sendfile(r3, r2, 0x0, 0xa198) [ 1161.830789][T18516] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. 20:26:15 executing program 1: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000180)={&(0x7f0000000100)="7c004e0f7eb6f0ae50030f1c62c166400f3a0fab0a00000004dfc5c4027d3fe566470f113b660f2f785f670f2ba80e0000002599899999", 0x4, &(0x7f0000000140)="f2df590bc46125767452e7875c3051c4e1f810f9c4e2fd1c43c1c1e3ab6546d3c63e42e200c402a947cdc4a2399ae3", {[0x1]}}, &(0x7f0000000240)={&(0x7f00000001c0)="c4a10dd5961d000000c481235c1cb42667f20f12f5f3436f42a4c4017c5aff3c2ac44178511e400f13ae00000000c481fc510b", 0x0, &(0x7f0000000200)="3e410f01d845894d07c461ff123bf0f69504000000c46331782f1ac44175facb460f6f14a9f0440fb32f450fe4167600"}, 0x8, &(0x7f0000000280)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a5377986fc254ec2862883ce7257cd4f7ae2dcfdaef81c581d1b4223e49887ee68e87ed537d5b2e957e1fac165be3eb34c5174f6279277376cbe5d10966df793456b54921f664921e1615264cc762c189704152109b0dff9eb9ca92da732cc5b46ffffff7f025485dc560b67fa9950386e7d44374265b739aa0ef8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c091b75999c66551d206c48cab1b787530de3629da0b37b211578542ae70ac9e8c0dbe754a77abd06ce2420a"], 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) [ 1162.141295][T18530] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. 20:26:15 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0xb2, 0x0) 20:26:15 executing program 1: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000180)={&(0x7f0000000100)="7c004e0f7eb6f0ae50030f1c62c166400f3a0fab0a00000004dfc5c4027d3fe566470f113b660f2f785f670f2ba80e0000002599899999", 0x4, &(0x7f0000000140)="f2df590bc46125767452e7875c3051c4e1f810f9c4e2fd1c43c1c1e3ab6546d3c63e42e200c402a947cdc4a2399ae3", {[0x1]}}, &(0x7f0000000240)={&(0x7f00000001c0)="c4a10dd5961d000000c481235c1cb42667f20f12f5f3436f42a4c4017c5aff3c2ac44178511e400f13ae00000000c481fc510b", 0x0, &(0x7f0000000200)="3e410f01d845894d07c461ff123bf0f69504000000c46331782f1ac44175facb460f6f14a9f0440fb32f450fe4167600"}, 0x8, &(0x7f0000000280)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a5377986fc254ec2862883ce7257cd4f7ae2dcfdaef81c581d1b4223e49887ee68e87ed537d5b2e957e1fac165be3eb34c5174f6279277376cbe5d10966df793456b54921f664921e1615264cc762c189704152109b0dff9eb9ca92da732cc5b46ffffff7f025485dc560b67fa9950386e7d44374265b739aa0ef8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c091b75999c66551d206c48cab1b787530de3629da0b37b211578542ae70ac9e8c0dbe754a77abd06ce2420a"], 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) [ 1162.449469][T18538] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1162.582271][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 1162.582290][ T28] audit: type=1804 audit(1590265575.904:874): pid=18526 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir374862090/syzkaller.5NWs5l/1122/file0" dev="sda1" ino=16335 res=1 20:26:15 executing program 1: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000180)={&(0x7f0000000100)="7c004e0f7eb6f0ae50030f1c62c166400f3a0fab0a00000004dfc5c4027d3fe566470f113b660f2f785f670f2ba80e0000002599899999", 0x4, &(0x7f0000000140)="f2df590bc46125767452e7875c3051c4e1f810f9c4e2fd1c43c1c1e3ab6546d3c63e42e200c402a947cdc4a2399ae3", {[0x1]}}, &(0x7f0000000240)={&(0x7f00000001c0)="c4a10dd5961d000000c481235c1cb42667f20f12f5f3436f42a4c4017c5aff3c2ac44178511e400f13ae00000000c481fc510b", 0x0, &(0x7f0000000200)="3e410f01d845894d07c461ff123bf0f69504000000c46331782f1ac44175facb460f6f14a9f0440fb32f450fe4167600"}, 0x8, &(0x7f0000000280)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a5377986fc254ec2862883ce7257cd4f7ae2dcfdaef81c581d1b4223e49887ee68e87ed537d5b2e957e1fac165be3eb34c5174f6279277376cbe5d10966df793456b54921f664921e1615264cc762c189704152109b0dff9eb9ca92da732cc5b46ffffff7f025485dc560b67fa9950386e7d44374265b739aa0ef8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c091b75999c66551d206c48cab1b787530de3629da0b37b211578542ae70ac9e8c0dbe754a77abd06ce2420a"], 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) [ 1162.617740][ T28] audit: type=1804 audit(1590265575.944:875): pid=18526 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir374862090/syzkaller.5NWs5l/1122/file0" dev="sda1" ino=16335 res=1 20:26:16 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x6, 0x0, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086201, &(0x7f0000000280)=0x5) ioctl$VIDIOC_G_JPEGCOMP(r3, 0x808c563d, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}, 0x1}, @in={0x2, 0x0, @empty}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}], 0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r4}) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x5c}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(0x0, 0x1, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r8 = socket$inet6(0xa, 0x80005, 0x0) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r8, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c) r9 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x0, 0x400400) r10 = gettid() syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') accept4$vsock_stream(r9, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @hyper}, 0x10, 0x80000) getgid() ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000240)) writev(r5, &(0x7f0000000080), 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) ioprio_get$pid(0x2, r10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000000000)) tkill(r10, 0x1004000000016) fgetxattr(r5, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x0, 0x0) close(r7) dup2(r9, r6) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0xbba}, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000007c0)={[{0x7, 0x3, 0x0, 0xe2fe, 0xffffffffffffff81, 0x4, 0x4, 0xffffffffffffb1b0, 0x10000, 0x0, 0x6, 0x2}, {0x1, 0x7, 0x8, 0x8, 0x0, 0x0, 0x8, 0xd3, 0x1, 0x0, 0x3f}, {0x10000, 0x3f, 0x2, 0xea7, 0x5, 0x20, 0x4, 0x1, 0x80000001, 0x0, 0x8245, 0x0, 0x2}]}) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) timer_delete(0x0) 20:26:16 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0xb3, 0x0) [ 1162.769935][T18543] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. 20:26:16 executing program 1: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000180)={&(0x7f0000000100)="7c004e0f7eb6f0ae50030f1c62c166400f3a0fab0a00000004dfc5c4027d3fe566470f113b660f2f785f670f2ba80e0000002599899999", 0x4, &(0x7f0000000140)="f2df590bc46125767452e7875c3051c4e1f810f9c4e2fd1c43c1c1e3ab6546d3c63e42e200c402a947cdc4a2399ae3", {[0x1]}}, &(0x7f0000000240)={&(0x7f00000001c0)="c4a10dd5961d000000c481235c1cb42667f20f12f5f3436f42a4c4017c5aff3c2ac44178511e400f13ae00000000c481fc510b", 0x0, &(0x7f0000000200)="3e410f01d845894d07c461ff123bf0f69504000000c46331782f1ac44175facb460f6f14a9f0440fb32f450fe4167600"}, 0x8, &(0x7f0000000280)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a5377986fc254ec2862883ce7257cd4f7ae2dcfdaef81c581d1b4223e49887ee68e87ed537d5b2e957e1fac165be3eb34c5174f6279277376cbe5d10966df793456b54921f664921e1615264cc762c189704152109b0dff9eb9ca92da732cc5b46ffffff7f025485dc560b67fa9950386e7d44374265b739aa0ef8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c091b75999c66551d206c48cab1b787530de3629da0b37b211578542ae70ac9e8c0dbe754a77abd06ce2420a"], 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) 20:26:16 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000000)=""/246) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000000)={0x1f}, 0x1) keyctl$set_reqkey_keyring(0xe, 0x0) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x66b80b9bdd5a3873, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r3, &(0x7f0000000480)=ANY=[], 0x82) sendfile(r3, r2, 0x0, 0xa198) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r5, r4, 0x0, 0xa198) [ 1163.060437][ T28] audit: type=1804 audit(1590265576.384:876): pid=18555 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir374862090/syzkaller.5NWs5l/1123/file0" dev="sda1" ino=16248 res=1 [ 1163.091506][T18557] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. 20:26:16 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0xb4, 0x0) 20:26:16 executing program 1: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000180)={&(0x7f0000000100)="7c004e0f7eb6f0ae50030f1c62c166400f3a0fab0a00000004dfc5c4027d3fe566470f113b660f2f785f670f2ba80e0000002599899999", 0x4, &(0x7f0000000140)="f2df590bc46125767452e7875c3051c4e1f810f9c4e2fd1c43c1c1e3ab6546d3c63e42e200c402a947cdc4a2399ae3", {[0x1]}}, &(0x7f0000000240)={&(0x7f00000001c0)="c4a10dd5961d000000c481235c1cb42667f20f12f5f3436f42a4c4017c5aff3c2ac44178511e400f13ae00000000c481fc510b", 0x0, &(0x7f0000000200)="3e410f01d845894d07c461ff123bf0f69504000000c46331782f1ac44175facb460f6f14a9f0440fb32f450fe4167600"}, 0x8, &(0x7f0000000280)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a5377986fc254ec2862883ce7257cd4f7ae2dcfdaef81c581d1b4223e49887ee68e87ed537d5b2e957e1fac165be3eb34c5174f6279277376cbe5d10966df793456b54921f664921e1615264cc762c189704152109b0dff9eb9ca92da732cc5b46ffffff7f025485dc560b67fa9950386e7d44374265b739aa0ef8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c091b75999c66551d206c48cab1b787530de3629da0b37b211578542ae70ac9e8c0dbe754a77abd06ce2420a"], 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) [ 1163.171832][ T28] audit: type=1804 audit(1590265576.394:877): pid=18555 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir374862090/syzkaller.5NWs5l/1123/file0" dev="sda1" ino=16248 res=1 [ 1163.273399][ T28] audit: type=1804 audit(1590265576.494:878): pid=18563 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir374862090/syzkaller.5NWs5l/1123/file0" dev="sda1" ino=16248 res=1 [ 1163.313701][T18574] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1163.384097][ T28] audit: type=1804 audit(1590265576.524:879): pid=18567 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir374862090/syzkaller.5NWs5l/1123/file0" dev="sda1" ino=16248 res=1 20:26:16 executing program 1: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000180)={&(0x7f0000000100)="7c004e0f7eb6f0ae50030f1c62c166400f3a0fab0a00000004dfc5c4027d3fe566470f113b660f2f785f670f2ba80e0000002599899999", 0x4, &(0x7f0000000140)="f2df590bc46125767452e7875c3051c4e1f810f9c4e2fd1c43c1c1e3ab6546d3c63e42e200c402a947cdc4a2399ae3", {[0x1]}}, &(0x7f0000000240)={&(0x7f00000001c0)="c4a10dd5961d000000c481235c1cb42667f20f12f5f3436f42a4c4017c5aff3c2ac44178511e400f13ae00000000c481fc510b", 0x0, &(0x7f0000000200)="3e410f01d845894d07c461ff123bf0f69504000000c46331782f1ac44175facb460f6f14a9f0440fb32f450fe4167600"}, 0x8, &(0x7f0000000280)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a5377986fc254ec2862883ce7257cd4f7ae2dcfdaef81c581d1b4223e49887ee68e87ed537d5b2e957e1fac165be3eb34c5174f6279277376cbe5d10966df793456b54921f664921e1615264cc762c189704152109b0dff9eb9ca92da732cc5b46ffffff7f025485dc560b67fa9950386e7d44374265b739aa0ef8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c091b75999c66551d206c48cab1b787530de3629da0b37b211578542ae70ac9e8c0dbe754a77abd06ce2420a"], 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) 20:26:16 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0xb5, 0x0) [ 1163.552388][T18579] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 1163.686511][T18579] device macsec1 entered promiscuous mode [ 1163.721897][T18579] device virt_wifi0 entered promiscuous mode [ 1163.777598][T18579] device virt_wifi0 left promiscuous mode 20:26:17 executing program 4: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x82) sendfile(r1, r0, 0x0, 0xa198) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r3 = dup2(r2, r2) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000000)=""/246) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r6 = dup2(r5, r5) ioctl$EVIOCGPROP(r6, 0xc004743e, &(0x7f0000000000)=""/246) r7 = getpid() sched_setscheduler(r7, 0x5, &(0x7f00000002c0)) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00q\'', @ANYRES16=r4, @ANYBLOB="100029bd7000ffdbdf253100000008000100010000000800db00", @ANYRES32=r6, @ANYBLOB='\b\x00R\x00', @ANYRES32=r7, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x4894}, 0x4000840) r8 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r9 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r9, r8, 0x0, 0xa198) 20:26:17 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0xb6, 0x0) 20:26:17 executing program 2: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) statfs(&(0x7f00000001c0)='./file0\x00', 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x2) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r5 = dup2(r4, r4) ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f0000000000)=""/246) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000080)='SMC_PNETID\x00') sendmsg$SMC_PNETID_DEL(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x20, r7, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r7, 0x200, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8011}, 0x400c0) dup3(r3, r0, 0x0) 20:26:17 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x6, 0x0, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086201, &(0x7f0000000280)=0x5) ioctl$VIDIOC_G_JPEGCOMP(r3, 0x808c563d, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}, 0x1}, @in={0x2, 0x0, @empty}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}], 0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r4}) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x5c}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(0x0, 0x1, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r7 = socket$inet6(0xa, 0x80005, 0x0) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r7, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c) r8 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x0, 0x400400) r9 = gettid() syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') accept4$vsock_stream(r8, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @hyper}, 0x10, 0x80000) getgid() ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000240)) writev(r5, &(0x7f0000000080), 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) ioprio_get$pid(0x2, r9) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000000000)) tkill(r9, 0x1004000000016) fgetxattr(r5, &(0x7f0000000840)=ANY=[@ANYBLOB="a50500714f7f7100d340200007d2644a6dc2ebdbd5db1f0867e0c40e01380ec99c6dcf2b0bef2533fdea38cd4ecd9f1d377a4a4aff9ec836959ff1a0191bd4bad0b8fe12bb4d78471a2f990c3776675c0dcdab4b39f584bca23a7a2fc19b27bc9b71e8ae59f42a718a3dec8d4374db63d9d795b0ff05c117aa5702290b3103bc28aec5801bb39ebdd5c3be0000000080000000e59b3dbaf1eb15fced2d000000000000000000000040000000000d2e45dfffb6c050f46226daadc63659168a50dda734148a8fe4d5b99b43e2edb3fe3e754d26bc8c16c313ea9c5bbd35d600702cfce25becac92fde18fa3701cb6b04eb84375191fd8b6ed74e535c990d82524dd5f8997e0930060bda93c57d6a9597a9ba79eb57071b5a49b61ec0fc5fee99c8d4984c400c7fef3cbec8abd2f191c94c41ae90c000000000000cf5406b34abd6f3ae8dc2fea6e5ed50649b862a7f665f095e1fd41b083596db8162f405d241c5bf97c009e6a702ce6408bc1cbd4e0c86692a484a9ad8959fb62f028a0dd925761dc08f1ae0ec4888ac7a64e36bd4093e555efee1780107e0e7039b3d3fc0290f93b7222de47e4a1e9f757ac6c5b9dc9ba4b2ebbc92a6e6c3f27f1b797634d06000000d8836651ba9beb008377323cdd69e464db54236c5663421c20f1142589c9b30fb74b378300000000000000000000f9d7ec43bed2988d5dd4fc8dc9841bfbf39d6968a1e41654fa965fe3e38cabc0e4fd7b1f04c0f69baae5767ece069beaf6dc87c4a0fd11d838c0dac7f5457f7531442cb4e1c48638768969c107039ce237c49bf5ca2862750ea66d48f1f2785cb81ec94a1f57dbbf9608b016decfd66f2d94b381c8ffc593a993d6861deca12cda5faf0ff4cd169ae7c52e2f872e1cc8488f6043c528f40c66c42c754e70dc9817c930f52e2fcf1f7b7c25f77ab96fc06baeec662d46ab333610c123394df2b4a9a57e13ec4dd6115488719f6e8384f25a97ee11e3a44ff524185bd4084146507c2735fdf427dd60220a66ebb5ac78ffe5646cf149a16fe3e5e1cba005ab2954d8c3f8ade1ddf979dd99ae3326b4383ea8cc41dfa1619df8bdbb186849df5891cb4d70000000001c9d85747b4617e35bfad5bbe3003cbfaa3eaa7e68ab928032a1338613f3ddb320f74a9a166d9075b6432401938c33c7f13db04c3599e7ced7b59f5f9f821d06889346b3a982253f3523ece1c9a1517b455206ad6f65aa5aa3f324e9b6d090f2d67e7452c450eceda06fd77a3dd2e085541caa961529f246a2d344b1e9c01b0efb78179a28042c79bc26f71f3766f745ecad7ba420b2556ddcf29d01626288174d54b0ef8cac5e2e33b3fa2c7782a66b2a6ce0a1c668f86d6235782e8b8a5c201e1154ef4f37657e9cc8d616c2bd8d9dba80f7048c93961619459863a05cb640b1b17ed290ec4fd2b190f37a8d63ef3088f5ccd137d66f5cb45d6beddeb4f8f3d4918840d8c0b804e3738b64fd8bbf3fd74b8e8411918ccf495fea0bf1611903da79ad10f2a73299b371"], 0x0, 0x0) close(0xffffffffffffffff) dup2(r8, r6) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0xbba}, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000007c0)={[{0x7, 0x3, 0x0, 0xe2fe, 0xffffffffffffff81, 0x4, 0x4, 0xffffffffffffb1b0, 0x10000, 0x0, 0x6, 0x2}, {0x1, 0x7, 0x8, 0x8, 0x0, 0x0, 0x8, 0xd3, 0x1, 0x0, 0x3f}, {0x10000, 0x3f, 0x2, 0xea7, 0x5, 0x20, 0x4, 0x1, 0x80000001, 0x0, 0x8245, 0x0, 0x2}]}) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) timer_delete(0x0) 20:26:17 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0xb7, 0x0) 20:26:17 executing program 1: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000180)={&(0x7f0000000100)="7c004e0f7eb6f0ae50030f1c62c166400f3a0fab0a00000004dfc5c4027d3fe566470f113b660f2f785f670f2ba80e0000002599899999", 0x4, &(0x7f0000000140)="f2df590bc46125767452e7875c3051c4e1f810f9c4e2fd1c43c1c1e3ab6546d3c63e42e200c402a947cdc4a2399ae3", {[0x1]}}, &(0x7f0000000240)={&(0x7f00000001c0)="c4a10dd5961d000000c481235c1cb42667f20f12f5f3436f42a4c4017c5aff3c2ac44178511e400f13ae00000000c481fc510b", 0x0, &(0x7f0000000200)="3e410f01d845894d07c461ff123bf0f69504000000c46331782f1ac44175facb460f6f14a9f0440fb32f450fe4167600"}, 0x8, &(0x7f0000000280)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a5377986fc254ec2862883ce7257cd4f7ae2dcfdaef81c581d1b4223e49887ee68e87ed537d5b2e957e1fac165be3eb34c5174f6279277376cbe5d10966df793456b54921f664921e1615264cc762c189704152109b0dff9eb9ca92da732cc5b46ffffff7f025485dc560b67fa9950386e7d44374265b739aa0ef8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c091b75999c66551d206c48cab1b787530de3629da0b37b211578542ae70ac9e8c0dbe754a77abd06ce2420a"], 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) [ 1164.474286][ T28] audit: type=1804 audit(1590265577.804:880): pid=18600 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir374862090/syzkaller.5NWs5l/1124/file0" dev="sda1" ino=16381 res=1 [ 1164.531850][ T28] audit: type=1804 audit(1590265577.854:881): pid=18600 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir374862090/syzkaller.5NWs5l/1124/file0" dev="sda1" ino=16381 res=1 [ 1164.585196][T18628] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 1164.665832][T18628] device macsec1 entered promiscuous mode [ 1164.672374][T18628] device virt_wifi0 entered promiscuous mode [ 1164.710722][T18628] device virt_wifi0 left promiscuous mode 20:26:18 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0xb8, 0x0) 20:26:18 executing program 2: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102384, 0x18ff0}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x3, @time={0x0, 0x7ff}, {0x0, 0x1}, {}, @ext={0xe6, &(0x7f00000193c0)="f7f258480aa4ce20e779e77d0074cc03592a160500000032a56ff5fdf63f2dadd5b54c6aa1cef20d94de765aa586d65a3d7f022e4c14f1bdd705d398eef68310ec46b654cd8f9c032f1078c135f1c760ca5232f285d288f2fb018195ad11527d344771c7332104f786b3f8713f3712bbe17de391691da39a8b2c41f8af6f373372f01191d23bc6e1dec19fdc215c59cc217b1f7223aacb947bd43875994cbfe904445694e0799263262335638ebf77bddd4dbeddaf81125948d26881df985e86fb463879637646fc3a4a3e751a7051bfc02f02e970a83f696b9461d093803520260f17e47a25"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x10001, &(0x7f00000198c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030302c757361725f69643d0000659a000000000000f83901d91e0f6d28dda4a0a8cc29074993b2609dee0d962ca687bbab83b6b30c3b1f629246064837af0e5458a0754a8a7682ef3cabd3fa9943f761ad9b02a5523b9252efdef3779084145f6a5a249d2883e79af7f7b82d7c6df8bd56f5400e55814eca72aa54d2db239c1f2d3a2435e4d1497f5ca0da61acc48e5ce45f447c40dff4dbc09da7beeecd66b88abc016868c909729c4b0473a0c06859f50a267d709efad060220db013d0c6858b519fe5f662c0bb0000", @ANYRESDEC=0x0, @ANYBLOB="2c340f4b3b1cecc9ac2e4cbe5edeeda6b12c07b258038c5cab5da6c41a172062ddbcac69d0146f316f021ad2d3970c2bb653128771bf186dc763380812c9dc6d5a27363e2c21f40604aa73ecedc7f0f668d2fc191c9695441552a87c0f4ccc6d77602b6dd3223ede0732d7ed6e4e100d136024e2324f7a304e826f702f51ff4a666822e82866d9af41067500080000000000002b6c99114f00cbf685b840497ef37e19a5fbf409c8cebc13e8f3c0bff54ec1c5ea7bc152847b8d8a92ba3b12c647b643aecade3212a36ff8ef2b2dfff3921e386e57300cad25fa00"/233, @ANYRESDEC=0x0]) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) statfs(&(0x7f00000001c0)='./file0\x00', 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x2) socket$inet6(0xa, 0x2, 0x0) 20:26:18 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0xb9, 0x0) 20:26:18 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x6, 0x0, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086201, &(0x7f0000000280)=0x5) ioctl$VIDIOC_G_JPEGCOMP(r3, 0x808c563d, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}, 0x1}, @in={0x2, 0x0, @empty}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}], 0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r4}) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x5c}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(0x0, 0x1, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r7 = socket$inet6(0xa, 0x80005, 0x0) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r7, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c) r8 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x0, 0x400400) r9 = gettid() syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') accept4$vsock_stream(r8, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @hyper}, 0x10, 0x80000) getgid() ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000240)) writev(r5, &(0x7f0000000080), 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) ioprio_get$pid(0x2, r9) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000000000)) tkill(r9, 0x1004000000016) fgetxattr(r5, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x0, 0x0) close(0xffffffffffffffff) dup2(r8, r6) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0xbba}, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000007c0)={[{0x7, 0x3, 0x0, 0xe2fe, 0xffffffffffffff81, 0x4, 0x4, 0xffffffffffffb1b0, 0x10000, 0x0, 0x6, 0x2}, {0x1, 0x7, 0x8, 0x8, 0x0, 0x0, 0x8, 0xd3, 0x1, 0x0, 0x3f}, {0x10000, 0x3f, 0x2, 0xea7, 0x5, 0x20, 0x4, 0x1, 0x80000001, 0x0, 0x8245, 0x0, 0x2}]}) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) timer_delete(0x0) 20:26:18 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0xba, 0x0) [ 1165.298476][T18650] fuse: Invalid rootmode 20:26:18 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0xbb, 0x0) [ 1165.887997][ T28] audit: type=1804 audit(1590265579.214:882): pid=18595 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir374862090/syzkaller.5NWs5l/1124/file0" dev="sda1" ino=16381 res=1 [ 1165.913700][ T28] audit: type=1804 audit(1590265579.214:883): pid=18595 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir374862090/syzkaller.5NWs5l/1124/file0" dev="sda1" ino=16381 res=1 20:26:19 executing program 1: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000180)={&(0x7f0000000100)="7c004e0f7eb6f0ae50030f1c62c166400f3a0fab0a00000004dfc5c4027d3fe566470f113b660f2f785f670f2ba80e0000002599899999", 0x4, &(0x7f0000000140)="f2df590bc46125767452e7875c3051c4e1f810f9c4e2fd1c43c1c1e3ab6546d3c63e42e200c402a947cdc4a2399ae3", {[0x1]}}, &(0x7f0000000240)={&(0x7f00000001c0)="c4a10dd5961d000000c481235c1cb42667f20f12f5f3436f42a4c4017c5aff3c2ac44178511e400f13ae00000000c481fc510b", 0x0, &(0x7f0000000200)="3e410f01d845894d07c461ff123bf0f69504000000c46331782f1ac44175facb460f6f14a9f0440fb32f450fe4167600"}, 0x8, &(0x7f0000000280)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a5377986fc254ec2862883ce7257cd4f7ae2dcfdaef81c581d1b4223e49887ee68e87ed537d5b2e957e1fac165be3eb34c5174f6279277376cbe5d10966df793456b54921f664921e1615264cc762c189704152109b0dff9eb9ca92da732cc5b46ffffff7f025485dc560b67fa9950386e7d44374265b739aa0ef8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c091b75999c66551d206c48cab1b787530de3629da0b37b211578542ae70ac9e8c0dbe754a77abd06ce2420a"], 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) 20:26:19 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0xbc, 0x0) 20:26:19 executing program 5: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x82) sendfile(r1, r0, 0x0, 0xa198) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r3 = dup2(r2, r2) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000000080)=""/143) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000001580)=ANY=[], 0x119) sendfile(r5, r4, 0x0, 0xa198) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCGPROP(r6, 0xc004743e, &(0x7f0000000000)=""/246) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r8, 0xc01064c7, &(0x7f00000005c0)={0x7, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(0xffffffffffffffff, 0xc00464c9, &(0x7f0000000600)={r9}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x3, 0x6, 0x7fff, 0x0], 0x4, 0x80000, r9, r2}) 20:26:19 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000000)=""/246) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000000)=""/246) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={0x0, 0x1f1}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000240)={r3, @in6={{0xa, 0x4e23, 0x6efa800, @empty, 0x7}}}, 0x84) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="740000000001010800000000000000000500000306001240000000000c000f800800024000000081080015400000000344000f8008000240000000fdffffffffffffff00080001400000000608000240000000090800034000008001080001400000000408000140000000010800024000000003"], 0x74}, 0x1, 0x0, 0x0, 0xc040}, 0x4841) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x12) r5 = open(&(0x7f0000000040)='./file0\x00', 0x145042, 0x0) write$binfmt_elf64(r5, &(0x7f0000000480)=ANY=[], 0x82) sendfile(r5, r4, 0x0, 0xa198) r6 = open(&(0x7f00000001c0)='./file0\x00', 0x2a4000, 0xa0) r7 = open(&(0x7f0000000040)='./file0\x00', 0x341482, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10) connect$inet(r8, &(0x7f0000000100)={0x2, 0x4e23, @rand_addr=0x7fffffff}, 0x10) sendmmsg(r8, &(0x7f0000007fc0), 0x400000000000030, 0x0) setsockopt$sock_void(r8, 0x1, 0x1b, 0x0, 0x0) sendfile(r7, r6, 0x0, 0xa198) [ 1166.086486][T18678] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 1166.241689][T18678] device macsec1 entered promiscuous mode [ 1166.270228][T18678] device virt_wifi0 entered promiscuous mode 20:26:19 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0xbd, 0x0) [ 1166.355977][T18678] device virt_wifi0 left promiscuous mode 20:26:19 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x6, 0x0, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086201, &(0x7f0000000280)=0x5) ioctl$VIDIOC_G_JPEGCOMP(r3, 0x808c563d, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}, 0x1}, @in={0x2, 0x0, @empty}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}], 0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r4}) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x5c}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(0x0, 0x1, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r7 = socket$inet6(0xa, 0x80005, 0x0) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r7, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c) r8 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x0, 0x400400) r9 = gettid() syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') accept4$vsock_stream(r8, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @hyper}, 0x10, 0x80000) getgid() ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000240)) writev(r5, &(0x7f0000000080), 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) ioprio_get$pid(0x2, r9) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000000000)) tkill(r9, 0x1004000000016) fgetxattr(r5, &(0x7f0000000840)=ANY=[@ANYBLOB="a50500714f7f7100d340200007d2644a6dc2ebdbd5db1f0867e0c40e01380ec99c6dcf2b0bef2533fdea38cd4ecd9f1d377a4a4aff9ec836959ff1a0191bd4bad0b8fe12bb4d78471a2f990c3776675c0dcdab4b39f584bca23a7a2fc19b27bc9b71e8ae59f42a718a3dec8d4374db63d9d795b0ff05c117aa5702290b3103bc28aec5801bb39ebdd5c3be0000000080000000e59b3dbaf1eb15fced2d000000000000000000000040000000000d2e45dfffb6c050f46226daadc63659168a50dda734148a8fe4d5b99b43e2edb3fe3e754d26bc8c16c313ea9c5bbd35d600702cfce25becac92fde18fa3701cb6b04eb84375191fd8b6ed74e535c990d82524dd5f8997e0930060bda93c57d6a9597a9ba79eb57071b5a49b61ec0fc5fee99c8d4984c400c7fef3cbec8abd2f191c94c41ae90c000000000000cf5406b34abd6f3ae8dc2fea6e5ed50649b862a7f665f095e1fd41b083596db8162f405d241c5bf97c009e6a702ce6408bc1cbd4e0c86692a484a9ad8959fb62f028a0dd925761dc08f1ae0ec4888ac7a64e36bd4093e555efee1780107e0e7039b3d3fc0290f93b7222de47e4a1e9f757ac6c5b9dc9ba4b2ebbc92a6e6c3f27f1b797634d06000000d8836651ba9beb008377323cdd69e464db54236c5663421c20f1142589c9b30fb74b378300000000000000000000f9d7ec43bed2988d5dd4fc8dc9841bfbf39d6968a1e41654fa965fe3e38cabc0e4fd7b1f04c0f69baae5767ece069beaf6dc87c4a0fd11d838c0dac7f5457f7531442cb4e1c48638768969c107039ce237c49bf5ca2862750ea66d48f1f2785cb81ec94a1f57dbbf9608b016decfd66f2d94b381c8ffc593a993d6861deca12cda5faf0ff4cd169ae7c52e2f872e1cc8488f6043c528f40c66c42c754e70dc9817c930f52e2fcf1f7b7c25f77ab96fc06baeec662d46ab333610c123394df2b4a9a57e13ec4dd6115488719f6e8384f25a97ee11e3a44ff524185bd4084146507c2735fdf427dd60220a66ebb5ac78ffe5646cf149a16fe3e5e1cba005ab2954d8c3f8ade1ddf979dd99ae3326b4383ea8cc41dfa1619df8bdbb186849df5891cb4d70000000001c9d85747b4617e35bfad5bbe3003cbfaa3eaa7e68ab928032a1338613f3ddb320f74a9a166d9075b6432401938c33c7f13db04c3599e7ced7b59f5f9f821d06889346b3a982253f3523ece1c9a1517b455206ad6f65aa5aa3f324e9b6d090f2d67e7452c450eceda06fd77a3dd2e085541caa961529f246a2d344b1e9c01b0efb78179a28042c79bc26f71f3766f745ecad7ba420b2556ddcf29d01626288174d54b0ef8cac5e2e33b3fa2c7782a66b2a6ce0a1c668f86d6235782e8b8a5c201e1154ef4f37657e9cc8d616c2bd8d9dba80f7048c93961619459863a05cb640b1b17ed290ec4fd2b190f37a8d63ef3088f5ccd137d66f5cb45d6beddeb4f8f3d4918840d8c0b804e3738b64fd8bbf3fd74b8e8411918ccf495fea0bf1611903da79ad10f2a73299b371"], 0x0, 0x0) close(0xffffffffffffffff) dup2(r8, r6) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0xbba}, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000007c0)={[{0x7, 0x3, 0x0, 0xe2fe, 0xffffffffffffff81, 0x4, 0x4, 0xffffffffffffb1b0, 0x10000, 0x0, 0x6, 0x2}, {0x1, 0x7, 0x8, 0x8, 0x0, 0x0, 0x8, 0xd3, 0x1, 0x0, 0x3f}, {0x10000, 0x3f, 0x2, 0xea7, 0x5, 0x20, 0x4, 0x1, 0x80000001, 0x0, 0x8245, 0x0, 0x2}]}) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) timer_delete(0x0) 20:26:20 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0xbe, 0x0) 20:26:21 executing program 2: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) statfs(&(0x7f00000001c0)='./file0\x00', 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x2) r3 = socket$inet6(0xa, 0x2, 0x0) connect$llc(r2, &(0x7f0000000040)={0x1a, 0x201, 0x5, 0x1f, 0x0, 0x3f, @random="55d5b1879eba"}, 0x10) dup3(r3, r0, 0x0) 20:26:21 executing program 1: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000180)={&(0x7f0000000100)="7c004e0f7eb6f0ae50030f1c62c166400f3a0fab0a00000004dfc5c4027d3fe566470f113b660f2f785f670f2ba80e0000002599899999", 0x4, &(0x7f0000000140)="f2df590bc46125767452e7875c3051c4e1f810f9c4e2fd1c43c1c1e3ab6546d3c63e42e200c402a947cdc4a2399ae3", {[0x1]}}, &(0x7f0000000240)={&(0x7f00000001c0)="c4a10dd5961d000000c481235c1cb42667f20f12f5f3436f42a4c4017c5aff3c2ac44178511e400f13ae00000000c481fc510b", 0x0, &(0x7f0000000200)="3e410f01d845894d07c461ff123bf0f69504000000c46331782f1ac44175facb460f6f14a9f0440fb32f450fe4167600"}, 0x8, &(0x7f0000000280)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a5377986fc254ec2862883ce7257cd4f7ae2dcfdaef81c581d1b4223e49887ee68e87ed537d5b2e957e1fac165be3eb34c5174f6279277376cbe5d10966df793456b54921f664921e1615264cc762c189704152109b0dff9eb9ca92da732cc5b46ffffff7f025485dc560b67fa9950386e7d44374265b739aa0ef8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c091b75999c66551d206c48cab1b787530de3629da0b37b211578542ae70ac9e8c0dbe754a77abd06ce2420a"], 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) 20:26:21 executing program 5: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x82) sendfile(r1, r0, 0x0, 0xa198) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x2) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000001580)=ANY=[], 0x119) sendfile(r3, r2, 0x0, 0xa198) 20:26:21 executing program 4: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x82) sendfile(r1, r0, 0x0, 0xa198) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x400000000000030, 0x0) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) r3 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r4, r3, 0x0, 0xa198) 20:26:21 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0xbf, 0x0) 20:26:21 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x6, 0x0, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086201, &(0x7f0000000280)=0x5) ioctl$VIDIOC_G_JPEGCOMP(r3, 0x808c563d, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}, 0x1}, @in={0x2, 0x0, @empty}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}], 0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r4}) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x5c}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(0x0, 0x1, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r8 = socket$inet6(0xa, 0x80005, 0x0) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r8, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c) r9 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x0, 0x400400) r10 = gettid() syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') accept4$vsock_stream(r9, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @hyper}, 0x10, 0x80000) getgid() ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000240)) writev(r5, &(0x7f0000000080), 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) ioprio_get$pid(0x2, r10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000000000)) tkill(r10, 0x1004000000016) fgetxattr(r5, &(0x7f0000000840)=ANY=[@ANYBLOB="a50500714f7f7100d340200007d2644a6dc2ebdbd5db1f0867e0c40e01380ec99c6dcf2b0bef2533fdea38cd4ecd9f1d377a4a4aff9ec836959ff1a0191bd4bad0b8fe12bb4d78471a2f990c3776675c0dcdab4b39f584bca23a7a2fc19b27bc9b71e8ae59f42a718a3dec8d4374db63d9d795b0ff05c117aa5702290b3103bc28aec5801bb39ebdd5c3be0000000080000000e59b3dbaf1eb15fced2d000000000000000000000040000000000d2e45dfffb6c050f46226daadc63659168a50dda734148a8fe4d5b99b43e2edb3fe3e754d26bc8c16c313ea9c5bbd35d600702cfce25becac92fde18fa3701cb6b04eb84375191fd8b6ed74e535c990d82524dd5f8997e0930060bda93c57d6a9597a9ba79eb57071b5a49b61ec0fc5fee99c8d4984c400c7fef3cbec8abd2f191c94c41ae90c000000000000cf5406b34abd6f3ae8dc2fea6e5ed50649b862a7f665f095e1fd41b083596db8162f405d241c5bf97c009e6a702ce6408bc1cbd4e0c86692a484a9ad8959fb62f028a0dd925761dc08f1ae0ec4888ac7a64e36bd4093e555efee1780107e0e7039b3d3fc0290f93b7222de47e4a1e9f757ac6c5b9dc9ba4b2ebbc92a6e6c3f27f1b797634d06000000d8836651ba9beb008377323cdd69e464db54236c5663421c20f1142589c9b30fb74b378300000000000000000000f9d7ec43bed2988d5dd4fc8dc9841bfbf39d6968a1e41654fa965fe3e38cabc0e4fd7b1f04c0f69baae5767ece069beaf6dc87c4a0fd11d838c0dac7f5457f7531442cb4e1c48638768969c107039ce237c49bf5ca2862750ea66d48f1f2785cb81ec94a1f57dbbf9608b016decfd66f2d94b381c8ffc593a993d6861deca12cda5faf0ff4cd169ae7c52e2f872e1cc8488f6043c528f40c66c42c754e70dc9817c930f52e2fcf1f7b7c25f77ab96fc06baeec662d46ab333610c123394df2b4a9a57e13ec4dd6115488719f6e8384f25a97ee11e3a44ff524185bd4084146507c2735fdf427dd60220a66ebb5ac78ffe5646cf149a16fe3e5e1cba005ab2954d8c3f8ade1ddf979dd99ae3326b4383ea8cc41dfa1619df8bdbb186849df5891cb4d70000000001c9d85747b4617e35bfad5bbe3003cbfaa3eaa7e68ab928032a1338613f3ddb320f74a9a166d9075b6432401938c33c7f13db04c3599e7ced7b59f5f9f821d06889346b3a982253f3523ece1c9a1517b455206ad6f65aa5aa3f324e9b6d090f2d67e7452c450eceda06fd77a3dd2e085541caa961529f246a2d344b1e9c01b0efb78179a28042c79bc26f71f3766f745ecad7ba420b2556ddcf29d01626288174d54b0ef8cac5e2e33b3fa2c7782a66b2a6ce0a1c668f86d6235782e8b8a5c201e1154ef4f37657e9cc8d616c2bd8d9dba80f7048c93961619459863a05cb640b1b17ed290ec4fd2b190f37a8d63ef3088f5ccd137d66f5cb45d6beddeb4f8f3d4918840d8c0b804e3738b64fd8bbf3fd74b8e8411918ccf495fea0bf1611903da79ad10f2a73299b371"], 0x0, 0x0) close(r7) dup2(0xffffffffffffffff, r6) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0xbba}, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000007c0)={[{0x7, 0x3, 0x0, 0xe2fe, 0xffffffffffffff81, 0x4, 0x4, 0xffffffffffffb1b0, 0x10000, 0x0, 0x6, 0x2}, {0x1, 0x7, 0x8, 0x8, 0x0, 0x0, 0x8, 0xd3, 0x1, 0x0, 0x3f}, {0x10000, 0x3f, 0x2, 0xea7, 0x5, 0x20, 0x4, 0x1, 0x80000001, 0x0, 0x8245, 0x0, 0x2}]}) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) timer_delete(0x0) [ 1168.169090][T18737] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 1168.256736][T18737] device macsec1 entered promiscuous mode [ 1168.276619][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 1168.276675][ T28] audit: type=1804 audit(1590265581.594:888): pid=18749 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir984313495/syzkaller.4Sv1HN/1016/file0" dev="sda1" ino=16191 res=1 [ 1168.309479][T18737] device virt_wifi0 entered promiscuous mode [ 1168.338862][T18753] fuse: Bad value for 'fd' [ 1168.351537][ T28] audit: type=1804 audit(1590265581.634:889): pid=18749 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir984313495/syzkaller.4Sv1HN/1016/file0" dev="sda1" ino=16191 res=1 [ 1168.378929][T18737] device virt_wifi0 left promiscuous mode [ 1168.380576][ T28] audit: type=1804 audit(1590265581.654:890): pid=18747 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir374862090/syzkaller.5NWs5l/1126/file0" dev="sda1" ino=16192 res=1 [ 1168.418753][ T28] audit: type=1804 audit(1590265581.664:891): pid=18747 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir374862090/syzkaller.5NWs5l/1126/file0" dev="sda1" ino=16192 res=1 20:26:21 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0xc0, 0x0) 20:26:22 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0xc1, 0x0) 20:26:22 executing program 1: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000180)={&(0x7f0000000100)="7c004e0f7eb6f0ae50030f1c62c166400f3a0fab0a00000004dfc5c4027d3fe566470f113b660f2f785f670f2ba80e0000002599899999", 0x4, &(0x7f0000000140)="f2df590bc46125767452e7875c3051c4e1f810f9c4e2fd1c43c1c1e3ab6546d3c63e42e200c402a947cdc4a2399ae3", {[0x1]}}, &(0x7f0000000240)={&(0x7f00000001c0)="c4a10dd5961d000000c481235c1cb42667f20f12f5f3436f42a4c4017c5aff3c2ac44178511e400f13ae00000000c481fc510b", 0x0, &(0x7f0000000200)="3e410f01d845894d07c461ff123bf0f69504000000c46331782f1ac44175facb460f6f14a9f0440fb32f450fe4167600"}, 0x8, &(0x7f0000000280)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a5377986fc254ec2862883ce7257cd4f7ae2dcfdaef81c581d1b4223e49887ee68e87ed537d5b2e957e1fac165be3eb34c5174f6279277376cbe5d10966df793456b54921f664921e1615264cc762c189704152109b0dff9eb9ca92da732cc5b46ffffff7f025485dc560b67fa9950386e7d44374265b739aa0ef8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c091b75999c66551d206c48cab1b787530de3629da0b37b211578542ae70ac9e8c0dbe754a77abd06ce2420a"], 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) 20:26:22 executing program 2: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) statfs(&(0x7f00000001c0)='./file0\x00', 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x2) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x200, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f00000000c0)) r4 = socket$inet6(0xa, 0x2, 0x0) dup3(r4, r0, 0x0) 20:26:22 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x6, 0x0, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086201, &(0x7f0000000280)=0x5) ioctl$VIDIOC_G_JPEGCOMP(r3, 0x808c563d, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}, 0x1}, @in={0x2, 0x0, @empty}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}], 0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r4}) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x5c}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(0x0, 0x1, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r8 = socket$inet6(0xa, 0x80005, 0x0) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r8, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c) r9 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x0, 0x400400) r10 = gettid() syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') accept4$vsock_stream(r9, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @hyper}, 0x10, 0x80000) getgid() ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000240)) writev(r5, &(0x7f0000000080), 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) ioprio_get$pid(0x2, r10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000000000)) tkill(r10, 0x1004000000016) fgetxattr(r5, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x0, 0x0) close(r7) dup2(0xffffffffffffffff, r6) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0xbba}, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000007c0)={[{0x7, 0x3, 0x0, 0xe2fe, 0xffffffffffffff81, 0x4, 0x4, 0xffffffffffffb1b0, 0x10000, 0x0, 0x6, 0x2}, {0x1, 0x7, 0x8, 0x8, 0x0, 0x0, 0x8, 0xd3, 0x1, 0x0, 0x3f}, {0x10000, 0x3f, 0x2, 0xea7, 0x5, 0x20, 0x4, 0x1, 0x80000001, 0x0, 0x8245, 0x0, 0x2}]}) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) timer_delete(0x0) [ 1168.995698][T18767] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 1169.005430][ T28] audit: type=1804 audit(1590265582.325:892): pid=18770 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir984313495/syzkaller.4Sv1HN/1016/file0" dev="sda1" ino=16191 res=1 20:26:22 executing program 4: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x82) sendfile(r1, r0, 0x0, 0xa198) syz_genetlink_get_family_id$smc(&(0x7f0000000080)='SMC_PNETID\x00') r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r3, r2, 0x0, 0xa198) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x900, 0x0) 20:26:22 executing program 5: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x82) sendfile(r1, r0, 0x0, 0xa198) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x400000000000030, 0x0) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000000)) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10) connect$inet(r5, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x400000000000030, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRES16=r0, @ANYRESOCT=r5, @ANYBLOB="8560871e9b926bc3f70a0918316ec88adb813decdb05b40719662d8f3eacaba62a", @ANYRESOCT=r1, @ANYRESOCT, @ANYBLOB="cb41f9c2fa4eaf94112beb88c163b18a64982a960ac96e410ddae6b18a1287d90f3450cd8387190720d67c885159c4af88ef478ba71e180d2322bb83ef66e5bb36d0a91cde8683e4a26c9066013814aad5657bb6848789afcd62efddefef2a6938706418e6f5f07f8ab583765b6d25a72f52dc14e011b1"], 0x119) sendfile(r3, r2, 0x0, 0xa198) [ 1169.141877][T18767] device macsec1 entered promiscuous mode [ 1169.152926][T18767] device virt_wifi0 entered promiscuous mode [ 1169.165993][ T28] audit: type=1804 audit(1590265582.325:893): pid=18770 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir984313495/syzkaller.4Sv1HN/1016/file0" dev="sda1" ino=16191 res=1 [ 1169.192164][T18767] device virt_wifi0 left promiscuous mode 20:26:22 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0xc2, 0x0) [ 1169.275947][ T28] audit: type=1804 audit(1590265582.335:894): pid=18769 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir374862090/syzkaller.5NWs5l/1126/file0" dev="sda1" ino=16192 res=1 [ 1169.411379][ T28] audit: type=1804 audit(1590265582.335:895): pid=18772 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir374862090/syzkaller.5NWs5l/1126/file0" dev="sda1" ino=16192 res=1 [ 1169.598924][ T28] audit: type=1804 audit(1590265582.715:896): pid=18790 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir374862090/syzkaller.5NWs5l/1127/file0" dev="sda1" ino=16269 res=1 [ 1169.632500][ T28] audit: type=1804 audit(1590265582.725:897): pid=18790 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir374862090/syzkaller.5NWs5l/1127/file0" dev="sda1" ino=16269 res=1 20:26:23 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0xc3, 0x0) 20:26:23 executing program 1: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000180)={&(0x7f0000000100)="7c004e0f7eb6f0ae50030f1c62c166400f3a0fab0a00000004dfc5c4027d3fe566470f113b660f2f785f670f2ba80e0000002599899999", 0x4, &(0x7f0000000140)="f2df590bc46125767452e7875c3051c4e1f810f9c4e2fd1c43c1c1e3ab6546d3c63e42e200c402a947cdc4a2399ae3", {[0x1]}}, &(0x7f0000000240)={&(0x7f00000001c0)="c4a10dd5961d000000c481235c1cb42667f20f12f5f3436f42a4c4017c5aff3c2ac44178511e400f13ae00000000c481fc510b", 0x0, &(0x7f0000000200)="3e410f01d845894d07c461ff123bf0f69504000000c46331782f1ac44175facb460f6f14a9f0440fb32f450fe4167600"}, 0x8, &(0x7f0000000280)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a5377986fc254ec2862883ce7257cd4f7ae2dcfdaef81c581d1b4223e49887ee68e87ed537d5b2e957e1fac165be3eb34c5174f6279277376cbe5d10966df793456b54921f664921e1615264cc762c189704152109b0dff9eb9ca92da732cc5b46ffffff7f025485dc560b67fa9950386e7d44374265b739aa0ef8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c091b75999c66551d206c48cab1b787530de3629da0b37b211578542ae70ac9e8c0dbe754a77abd06ce2420a"], 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) [ 1170.153718][T18811] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 20:26:23 executing program 2: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) statfs(&(0x7f00000001c0)='./file0\x00', 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x2) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup3(r3, r0, 0x0) r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x400002, 0x0) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000300)={0xb, @sliced={0x5, [0x855a, 0x8001, 0xff, 0x8d57, 0xd5, 0x9, 0x1, 0x1ff, 0x40, 0x1, 0x6, 0x7f, 0x7, 0x7f, 0x5, 0x7, 0x5, 0xa52b, 0x7, 0x8, 0xc5, 0x6, 0xfff9, 0x8, 0xffff, 0x4, 0x7fe0, 0x1f, 0x7fff, 0x1, 0x1ff, 0x1, 0x47, 0x8, 0x0, 0x101, 0x0, 0x2, 0x7, 0x800, 0x101, 0x3ff, 0x6, 0x4, 0x1ff, 0x4, 0x1, 0x4], 0x5}}) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000100)={0x0, 0x401, 0x3f, &(0x7f00000000c0)=0x1000}) 20:26:23 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x6, 0x0, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086201, &(0x7f0000000280)=0x5) ioctl$VIDIOC_G_JPEGCOMP(r3, 0x808c563d, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}, 0x1}, @in={0x2, 0x0, @empty}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}], 0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r4}) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x5c}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(0x0, 0x1, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r8 = socket$inet6(0xa, 0x80005, 0x0) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r8, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c) r9 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x0, 0x400400) r10 = gettid() syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') accept4$vsock_stream(r9, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @hyper}, 0x10, 0x80000) getgid() ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000240)) writev(r5, &(0x7f0000000080), 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) ioprio_get$pid(0x2, r10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000000000)) tkill(r10, 0x1004000000016) fgetxattr(r5, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x0, 0x0) close(r7) dup2(0xffffffffffffffff, r6) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0xbba}, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000007c0)={[{0x7, 0x3, 0x0, 0xe2fe, 0xffffffffffffff81, 0x4, 0x4, 0xffffffffffffb1b0, 0x10000, 0x0, 0x6, 0x2}, {0x1, 0x7, 0x8, 0x8, 0x0, 0x0, 0x8, 0xd3, 0x1, 0x0, 0x3f}, {0x10000, 0x3f, 0x2, 0xea7, 0x5, 0x20, 0x4, 0x1, 0x80000001, 0x0, 0x8245, 0x0, 0x2}]}) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) timer_delete(0x0) 20:26:23 executing program 4: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x82) sendfile(r1, r0, 0x0, 0xa198) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x400000000000030, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}, 0x1, 0xc00000000000000}, 0x0) sendmsg$inet(r3, &(0x7f0000000440)={&(0x7f0000000140)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000180)="890a579e4537e701d098c54cf15e08cd83bfd9eb366044104a7112ccee774a4417", 0x21}, {&(0x7f0000000200)="5d7acf5fedc98c250d5ce8b6484bbacaad1af0d7f02ef718d799de8b53055070afd30748d9a2552aa0be27d849ffe0d7c62a7d67754e4b28d806542882513400b491656537ec6b36e41f6a456bd7937b7059109763020e0bda9b40ba6f446d5a8bf389813c98954e4249a40aff8cd5dd28cb6ae6d3bc38faa43de9c24474b327bb48d10250b61c7ee81d537fbb538b6de6340ba3be8b7850f4b064b0c271c3d0740c62ddd44847e1aba4dc991edfae10b23b", 0xb2}], 0x2, &(0x7f0000000300)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3f}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x20}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xc0}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@end, @noop, @timestamp={0x44, 0x28, 0x7b, 0x0, 0x4, [0x3, 0x1, 0x74, 0x102, 0x566, 0x6, 0x1, 0x2, 0xcf]}, @noop, @end]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x20}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7f}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @private=0xa010100, @broadcast}}}], 0x108}, 0xc811) r7 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r7, r2, 0x0, 0xa198) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r9 = dup2(r8, r8) ioctl$EVIOCGPROP(r9, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$VHOST_SET_VRING_BASE(r9, 0x4008af12, &(0x7f0000000000)={0x2, 0x3}) 20:26:23 executing program 5: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x82) sendfile(r1, r0, 0x0, 0xa198) open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000001580)=ANY=[], 0x119) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x400000000000030, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000000)={r4}) ioctl$IMGETDEVINFO(r5, 0x80044944, &(0x7f0000000080)={0x400}) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x400000000000030, 0x0) sendfile(r2, r3, 0x0, 0xfffffffffffffff9) [ 1170.386027][T18811] device macsec1 entered promiscuous mode [ 1170.415455][T18811] device virt_wifi0 entered promiscuous mode [ 1170.469720][T18811] device virt_wifi0 left promiscuous mode 20:26:23 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0xc4, 0x0) 20:26:24 executing program 1: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000180)={&(0x7f0000000100)="7c004e0f7eb6f0ae50030f1c62c166400f3a0fab0a00000004dfc5c4027d3fe566470f113b660f2f785f670f2ba80e0000002599899999", 0x4, &(0x7f0000000140)="f2df590bc46125767452e7875c3051c4e1f810f9c4e2fd1c43c1c1e3ab6546d3c63e42e200c402a947cdc4a2399ae3", {[0x1]}}, &(0x7f0000000240)={&(0x7f00000001c0)="c4a10dd5961d000000c481235c1cb42667f20f12f5f3436f42a4c4017c5aff3c2ac44178511e400f13ae00000000c481fc510b", 0x0, &(0x7f0000000200)="3e410f01d845894d07c461ff123bf0f69504000000c46331782f1ac44175facb460f6f14a9f0440fb32f450fe4167600"}, 0x8, &(0x7f0000000280)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a5377986fc254ec2862883ce7257cd4f7ae2dcfdaef81c581d1b4223e49887ee68e87ed537d5b2e957e1fac165be3eb34c5174f6279277376cbe5d10966df793456b54921f664921e1615264cc762c189704152109b0dff9eb9ca92da732cc5b46ffffff7f025485dc560b67fa9950386e7d44374265b739aa0ef8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c091b75999c66551d206c48cab1b787530de3629da0b37b211578542ae70ac9e8c0dbe754a77abd06ce2420a"], 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) 20:26:24 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0xc5, 0x0) 20:26:24 executing program 4: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000000)=@v2={0x2, @aes128, 0x8, [], "bede7101c1305a21d0ea9fbbf40b945b"}) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000000140)=0x1, 0x4) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x82) sendfile(r1, r0, 0x0, 0xa198) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r5 = dup2(r4, r4) ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$ASHMEM_SET_PROT_MASK(r5, 0x40087705, &(0x7f00000000c0)={0xcb2, 0xffffffff}) sendfile(r3, r2, 0x0, 0xa198) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x1, 0x3, 0x401, 0x9, 0x4}}) ioctl$KVM_GET_MSRS(r3, 0xc008ae88, &(0x7f0000000180)={0x1, 0x0, [{}]}) [ 1171.405744][T18857] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 20:26:24 executing program 2: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = fcntl$dupfd(r0, 0x936c760b657df274, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) statfs(&(0x7f00000001c0)='./file0\x00', 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x2) r3 = socket$inet6(0xa, 0x2, 0x0) dup3(r3, r0, 0x0) 20:26:24 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x6, 0x0, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086201, &(0x7f0000000280)=0x5) ioctl$VIDIOC_G_JPEGCOMP(r3, 0x808c563d, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}, 0x1}, @in={0x2, 0x0, @empty}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}], 0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r4}) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x5c}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(0x0, 0x1, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r7 = socket$inet6(0xa, 0x80005, 0x0) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r7, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c) r8 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x0, 0x400400) r9 = gettid() syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') accept4$vsock_stream(r8, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @hyper}, 0x10, 0x80000) getgid() ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000240)) writev(r5, &(0x7f0000000080), 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) ioprio_get$pid(0x2, r9) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000000000)) tkill(r9, 0x1004000000016) fgetxattr(r5, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x0, 0x0) close(r6) dup2(r8, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0xbba}, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000007c0)={[{0x7, 0x3, 0x0, 0xe2fe, 0xffffffffffffff81, 0x4, 0x4, 0xffffffffffffb1b0, 0x10000, 0x0, 0x6, 0x2}, {0x1, 0x7, 0x8, 0x8, 0x0, 0x0, 0x8, 0xd3, 0x1, 0x0, 0x3f}, {0x10000, 0x3f, 0x2, 0xea7, 0x5, 0x20, 0x4, 0x1, 0x80000001, 0x0, 0x8245, 0x0, 0x2}]}) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) timer_delete(0x0) 20:26:24 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0xc6, 0x0) 20:26:24 executing program 5: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x82) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r3 = dup2(r2, r2) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000000)=""/246) r4 = accept$inet6(r3, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGSKNS(r4, 0x894c, &(0x7f0000000080)=0x4) sendfile(r1, r0, 0x0, 0xa198) r5 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r6 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000001580)=ANY=[], 0x119) sendfile(r6, r5, 0x0, 0xa198) [ 1171.591176][T18857] device macsec1 entered promiscuous mode [ 1171.649485][T18857] device virt_wifi0 entered promiscuous mode [ 1171.685843][T18857] device virt_wifi0 left promiscuous mode [ 1171.773998][T18876] fuse: Bad value for 'fd' 20:26:25 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0xc7, 0x0) 20:26:25 executing program 2: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='f$=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67f26f7570070000000862667a85c7035bab7a739ee22b3c34cc6b18631f6da76cf7117369262af794be3f41943f82fc2733d59a0bbbdb54be0006ef5967ea73cfcb9a05dd173fb3b08613284d0bc031c98c8a791108395ba7257214dba6535425b336fcdc9dbde08a8d9de8897f74320e7c628dc82b9f4506c2b7f3baf6895cabb9bf80a59824c3773b9216f6c958dc7fbd2123e324930ec396b0203730885042061542d08fc11400"/179, @ANYRESDEC=0x0]) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) statfs(&(0x7f00000001c0)='./file0\x00', 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) bind$unix(r4, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r7 = dup2(r6, r6) ioctl$EVIOCGPROP(r7, 0xc004743e, &(0x7f0000000000)=""/246) sendmsg$IPCTNL_MSG_EXP_NEW(r7, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000440)={0x1c0, 0x0, 0x2, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@CTA_EXPECT_HELP_NAME={0xa, 0x6, 'H.245\x00'}, @CTA_EXPECT_NAT={0x190, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @empty}}}]}, @CTA_EXPECT_NAT_TUPLE={0x7c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_NAT_TUPLE={0x40, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x78, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x8}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xfffffffd}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x20000040}, 0x8812) dup3(r5, r0, 0x0) 20:26:25 executing program 1: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000180)={&(0x7f0000000100)="7c004e0f7eb6f0ae50030f1c62c166400f3a0fab0a00000004dfc5c4027d3fe566470f113b660f2f785f670f2ba80e0000002599899999", 0x4, &(0x7f0000000140)="f2df590bc46125767452e7875c3051c4e1f810f9c4e2fd1c43c1c1e3ab6546d3c63e42e200c402a947cdc4a2399ae3", {[0x1]}}, &(0x7f0000000240)={&(0x7f00000001c0)="c4a10dd5961d000000c481235c1cb42667f20f12f5f3436f42a4c4017c5aff3c2ac44178511e400f13ae00000000c481fc510b", 0x0, &(0x7f0000000200)="3e410f01d845894d07c461ff123bf0f69504000000c46331782f1ac44175facb460f6f14a9f0440fb32f450fe4167600"}, 0x8, &(0x7f0000000280)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a5377986fc254ec2862883ce7257cd4f7ae2dcfdaef81c581d1b4223e49887ee68e87ed537d5b2e957e1fac165be3eb34c5174f6279277376cbe5d10966df793456b54921f664921e1615264cc762c189704152109b0dff9eb9ca92da732cc5b46ffffff7f025485dc560b67fa9950386e7d44374265b739aa0ef8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c091b75999c66551d206c48cab1b787530de3629da0b37b211578542ae70ac9e8c0dbe754a77abd06ce2420a"], 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) [ 1172.325659][T18902] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 1172.368776][T18903] fuse: Unknown parameter 'f$' 20:26:25 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0xc8, 0x0) [ 1172.466415][T18902] device macsec1 entered promiscuous mode [ 1172.496444][T18902] device virt_wifi0 entered promiscuous mode [ 1172.548290][T18902] device virt_wifi0 left promiscuous mode 20:26:26 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x6, 0x0, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086201, &(0x7f0000000280)=0x5) ioctl$VIDIOC_G_JPEGCOMP(r3, 0x808c563d, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}, 0x1}, @in={0x2, 0x0, @empty}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}], 0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r4}) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x5c}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(0x0, 0x1, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r7 = socket$inet6(0xa, 0x80005, 0x0) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r7, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c) r8 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x0, 0x400400) r9 = gettid() syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') accept4$vsock_stream(r8, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @hyper}, 0x10, 0x80000) getgid() ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000240)) writev(r5, &(0x7f0000000080), 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) ioprio_get$pid(0x2, r9) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000000000)) tkill(r9, 0x1004000000016) fgetxattr(r5, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x0, 0x0) close(r6) dup2(r8, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0xbba}, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000007c0)={[{0x7, 0x3, 0x0, 0xe2fe, 0xffffffffffffff81, 0x4, 0x4, 0xffffffffffffb1b0, 0x10000, 0x0, 0x6, 0x2}, {0x1, 0x7, 0x8, 0x8, 0x0, 0x0, 0x8, 0xd3, 0x1, 0x0, 0x3f}, {0x10000, 0x3f, 0x2, 0xea7, 0x5, 0x20, 0x4, 0x1, 0x80000001, 0x0, 0x8245, 0x0, 0x2}]}) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) timer_delete(0x0) 20:26:26 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0xc9, 0x0) [ 1173.115582][T18931] fuse: Unknown parameter 'f$' 20:26:26 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0xca, 0x0) 20:26:26 executing program 4: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x82) sendfile(r1, r0, 0x0, 0xa198) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r3, r2, 0x0, 0xa198) 20:26:26 executing program 1: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000180)={&(0x7f0000000100)="7c004e0f7eb6f0ae50030f1c62c166400f3a0fab0a00000004dfc5c4027d3fe566470f113b660f2f785f670f2ba80e0000002599899999", 0x4, &(0x7f0000000140)="f2df590bc46125767452e7875c3051c4e1f810f9c4e2fd1c43c1c1e3ab6546d3c63e42e200c402a947cdc4a2399ae3", {[0x1]}}, &(0x7f0000000240)={&(0x7f00000001c0)="c4a10dd5961d000000c481235c1cb42667f20f12f5f3436f42a4c4017c5aff3c2ac44178511e400f13ae00000000c481fc510b", 0x0, &(0x7f0000000200)="3e410f01d845894d07c461ff123bf0f69504000000c46331782f1ac44175facb460f6f14a9f0440fb32f450fe4167600"}, 0x8, &(0x7f0000000280)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a5377986fc254ec2862883ce7257cd4f7ae2dcfdaef81c581d1b4223e49887ee68e87ed537d5b2e957e1fac165be3eb34c5174f6279277376cbe5d10966df793456b54921f664921e1615264cc762c189704152109b0dff9eb9ca92da732cc5b46ffffff7f025485dc560b67fa9950386e7d44374265b739aa0ef8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c091b75999c66551d206c48cab1b787530de3629da0b37b211578542ae70ac9e8c0dbe754a77abd06ce2420a"], 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) 20:26:26 executing program 5: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x82) sendfile(r1, r0, 0x0, 0xa198) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x400000, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000001580)=ANY=[], 0x119) sendfile(r3, r2, 0x0, 0xa198) [ 1173.315978][T18949] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 1173.384673][T18949] device macsec1 entered promiscuous mode [ 1173.415047][T18949] device virt_wifi0 entered promiscuous mode 20:26:26 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0xcb, 0x0) [ 1173.486805][T18949] device virt_wifi0 left promiscuous mode [ 1173.506177][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 1173.506196][ T28] audit: type=1804 audit(1590265586.835:919): pid=18961 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir374862090/syzkaller.5NWs5l/1130/file0" dev="sda1" ino=16167 res=1 [ 1173.630296][ T28] audit: type=1804 audit(1590265586.875:920): pid=18961 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir374862090/syzkaller.5NWs5l/1130/file0" dev="sda1" ino=16167 res=1 20:26:27 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x6, 0x0, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086201, &(0x7f0000000280)=0x5) ioctl$VIDIOC_G_JPEGCOMP(r3, 0x808c563d, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}, 0x1}, @in={0x2, 0x0, @empty}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}], 0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r4}) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x5c}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(0x0, 0x1, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r7 = socket$inet6(0xa, 0x80005, 0x0) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r7, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c) r8 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x0, 0x400400) r9 = gettid() syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') accept4$vsock_stream(r8, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @hyper}, 0x10, 0x80000) getgid() ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000240)) writev(r5, &(0x7f0000000080), 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) ioprio_get$pid(0x2, r9) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000000000)) tkill(r9, 0x1004000000016) fgetxattr(r5, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x0, 0x0) close(r6) dup2(r8, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0xbba}, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000007c0)={[{0x7, 0x3, 0x0, 0xe2fe, 0xffffffffffffff81, 0x4, 0x4, 0xffffffffffffb1b0, 0x10000, 0x0, 0x6, 0x2}, {0x1, 0x7, 0x8, 0x8, 0x0, 0x0, 0x8, 0xd3, 0x1, 0x0, 0x3f}, {0x10000, 0x3f, 0x2, 0xea7, 0x5, 0x20, 0x4, 0x1, 0x80000001, 0x0, 0x8245, 0x0, 0x2}]}) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) timer_delete(0x0) 20:26:27 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0xcc, 0x0) [ 1174.230000][ T28] audit: type=1804 audit(1590265587.555:921): pid=18974 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir374862090/syzkaller.5NWs5l/1130/file0" dev="sda1" ino=16167 res=1 20:26:27 executing program 5: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x82) sendfile(r1, r0, 0x0, 0xa198) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x109042, 0x12) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000001580)=ANY=[], 0x119) sendfile(r3, r2, 0x0, 0xa198) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x400000, 0x0) ioctl$VT_SETMODE(r4, 0x5602, &(0x7f00000000c0)={0x7f, 0x7, 0xff, 0x9, 0xfff8}) 20:26:27 executing program 1: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000180)={&(0x7f0000000100)="7c004e0f7eb6f0ae50030f1c62c166400f3a0fab0a00000004dfc5c4027d3fe566470f113b660f2f785f670f2ba80e0000002599899999", 0x4, &(0x7f0000000140)="f2df590bc46125767452e7875c3051c4e1f810f9c4e2fd1c43c1c1e3ab6546d3c63e42e200c402a947cdc4a2399ae3", {[0x1]}}, &(0x7f0000000240)={&(0x7f00000001c0)="c4a10dd5961d000000c481235c1cb42667f20f12f5f3436f42a4c4017c5aff3c2ac44178511e400f13ae00000000c481fc510b", 0x0, &(0x7f0000000200)="3e410f01d845894d07c461ff123bf0f69504000000c46331782f1ac44175facb460f6f14a9f0440fb32f450fe4167600"}, 0x8, &(0x7f0000000280)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a5377986fc254ec2862883ce7257cd4f7ae2dcfdaef81c581d1b4223e49887ee68e87ed537d5b2e957e1fac165be3eb34c5174f6279277376cbe5d10966df793456b54921f664921e1615264cc762c189704152109b0dff9eb9ca92da732cc5b46ffffff7f025485dc560b67fa9950386e7d44374265b739aa0ef8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c091b75999c66551d206c48cab1b787530de3629da0b37b211578542ae70ac9e8c0dbe754a77abd06ce2420a"], 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) [ 1174.340135][ T28] audit: type=1804 audit(1590265587.595:922): pid=18959 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir374862090/syzkaller.5NWs5l/1130/file0" dev="sda1" ino=16167 res=1 20:26:27 executing program 4: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x50) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x82) sendfile(r1, r0, 0x0, 0xa198) open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x20000, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x2840c1, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000240)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000808}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)={0x28, r4, 0xe400762a4a1570ed, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xffffffffffffff82, 0x13, "00000000006542f6be916963a019b24d704aea764500"/32}]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x4845) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000000c0)={0x42, @tick=0x4, 0x83, {0x1f, 0x20}, 0x0, 0x0, 0x1e}) ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0xfff) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r6 = dup2(r5, r5) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000000)=""/246) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="81fa03f9", @ANYRES16=r7, @ANYBLOB="02d028bd7000fe0006000400000014000180060001000a000000060001000200000008000400070001000800060001000000080004000700000030000180080005000500400014000300fc0100000000000000000000000000e3b0843d0fe545e047dd9e83993600060000fcffffff000000"], 0x78}, 0x1, 0x0, 0x0, 0x20000404}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r6, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r7, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x825}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x20000010) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000) [ 1174.464825][T18982] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 20:26:27 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0xcd, 0x0) [ 1174.563619][ T28] audit: type=1804 audit(1590265587.895:923): pid=18991 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir984313495/syzkaller.4Sv1HN/1021/file0" dev="sda1" ino=16107 res=1 [ 1174.624867][T18982] device macsec1 entered promiscuous mode [ 1174.645839][T18982] device virt_wifi0 entered promiscuous mode [ 1174.690729][ T28] audit: type=1804 audit(1590265587.935:924): pid=18993 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir984313495/syzkaller.4Sv1HN/1021/file0" dev="sda1" ino=16107 res=1 [ 1174.750478][T18982] device virt_wifi0 left promiscuous mode [ 1174.820291][ T28] audit: type=1804 audit(1590265587.985:925): pid=18994 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir374862090/syzkaller.5NWs5l/1131/file0" dev="sda1" ino=16152 res=1 [ 1175.124921][ T28] audit: type=1804 audit(1590265588.035:926): pid=18994 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir374862090/syzkaller.5NWs5l/1131/file0" dev="sda1" ino=16152 res=1 [ 1175.252964][ T28] audit: type=1804 audit(1590265588.575:927): pid=18993 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir984313495/syzkaller.4Sv1HN/1021/file0" dev="sda1" ino=16107 res=1 [ 1175.290712][ T28] audit: type=1804 audit(1590265588.575:928): pid=18991 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir984313495/syzkaller.4Sv1HN/1021/file0" dev="sda1" ino=16107 res=1 20:26:28 executing program 5: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x82) sendfile(r1, r0, 0x0, 0xa198) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000001580)=ANY=[], 0x119) sendfile(r3, r2, 0x0, 0xa198) syncfs(0xffffffffffffffff) 20:26:28 executing program 1: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000180)={&(0x7f0000000100)="7c004e0f7eb6f0ae50030f1c62c166400f3a0fab0a00000004dfc5c4027d3fe566470f113b660f2f785f670f2ba80e0000002599899999", 0x4, &(0x7f0000000140)="f2df590bc46125767452e7875c3051c4e1f810f9c4e2fd1c43c1c1e3ab6546d3c63e42e200c402a947cdc4a2399ae3", {[0x1]}}, &(0x7f0000000240)={&(0x7f00000001c0)="c4a10dd5961d000000c481235c1cb42667f20f12f5f3436f42a4c4017c5aff3c2ac44178511e400f13ae00000000c481fc510b", 0x0, &(0x7f0000000200)="3e410f01d845894d07c461ff123bf0f69504000000c46331782f1ac44175facb460f6f14a9f0440fb32f450fe4167600"}, 0x8, &(0x7f0000000280)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a5377986fc254ec2862883ce7257cd4f7ae2dcfdaef81c581d1b4223e49887ee68e87ed537d5b2e957e1fac165be3eb34c5174f6279277376cbe5d10966df793456b54921f664921e1615264cc762c189704152109b0dff9eb9ca92da732cc5b46ffffff7f025485dc560b67fa9950386e7d44374265b739aa0ef8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c091b75999c66551d206c48cab1b787530de3629da0b37b211578542ae70ac9e8c0dbe754a77abd06ce2420a"], 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) [ 1175.455293][T19006] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 20:26:28 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0xce, 0x0) [ 1175.515163][T19006] device macsec1 entered promiscuous mode [ 1175.529345][T19006] device virt_wifi0 entered promiscuous mode [ 1175.551687][T19006] device virt_wifi0 left promiscuous mode 20:26:28 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x6, 0x0, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086201, &(0x7f0000000280)=0x5) ioctl$VIDIOC_G_JPEGCOMP(r3, 0x808c563d, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}, 0x1}, @in={0x2, 0x0, @empty}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}], 0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r4}) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x5c}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(0x0, 0x1, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r8 = socket$inet6(0xa, 0x80005, 0x0) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r8, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c) r9 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x0, 0x400400) r10 = gettid() syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') accept4$vsock_stream(r9, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @hyper}, 0x10, 0x80000) getgid() ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000240)) writev(r5, &(0x7f0000000080), 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) ioprio_get$pid(0x2, r10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000000000)) tkill(r10, 0x1004000000016) fgetxattr(r5, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x0, 0x0) close(r7) dup2(r9, r6) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000007c0)={[{0x7, 0x3, 0x0, 0xe2fe, 0xffffffffffffff81, 0x4, 0x4, 0xffffffffffffb1b0, 0x10000, 0x0, 0x6, 0x2}, {0x1, 0x7, 0x8, 0x8, 0x0, 0x0, 0x8, 0xd3, 0x1, 0x0, 0x3f}, {0x10000, 0x3f, 0x2, 0xea7, 0x5, 0x20, 0x4, 0x1, 0x80000001, 0x0, 0x8245, 0x0, 0x2}]}) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) timer_delete(0x0) 20:26:28 executing program 4: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x82) sendfile(r1, r0, 0x0, 0xa198) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x20681, 0x0) sendfile(r3, r2, 0x0, 0xa198) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r5 = dup2(r4, r4) ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f0000000000)=""/246) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10) connect$inet(r6, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x400000000000030, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000200)={'filter\x00', 0x7, 0x4, 0x418, 0x220, 0x110, 0x110, 0x330, 0x330, 0x330, 0x4, &(0x7f0000000140), {[{{@arp={@dev={0xac, 0x14, 0x14, 0x28}, @broadcast, 0xffffffff, 0xffffff00, 0xb, 0x10, {@empty, {[0xff, 0x0, 0x0, 0xff, 0x0, 0xff]}}, {@mac=@dev={[], 0x2a}, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x7, 0x20, 0x6, 0x9, 0x2, 0x99, 'veth1_macvtap\x00', 'veth1_macvtap\x00', {}, {0xff}, 0x0, 0x210}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @private=0xa010101, @broadcast, 0xf}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @dev={0xac, 0x14, 0x14, 0x3a}, 0x8, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @dev={0xac, 0x14, 0x14, 0x16}, @loopback, 0x1, 0xffffffff}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x468) ioctl$KVM_S390_UCAS_UNMAP(r5, 0x4018ae51, &(0x7f0000000080)={0x9, 0x5, 0x7ff}) 20:26:29 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0xcf, 0x0) [ 1176.007111][T19029] x_tables: duplicate underflow at hook 1 20:26:29 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0xd0, 0x0) 20:26:29 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0xd1, 0x0) 20:26:29 executing program 5: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x161042, 0x160) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x82) sendfile(r1, r0, 0x0, 0xa198) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000001580)=ANY=[], 0x119) sendfile(r3, r2, 0x0, 0xa198) ioctl$SNDCTL_DSP_STEREO(r1, 0xc0045003, &(0x7f0000000000)=0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x400000000000030, 0x0) ioctl$sock_SIOCBRADDBR(r4, 0x89a0, &(0x7f0000000080)='vxcan1\x00') 20:26:29 executing program 1: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000180)={&(0x7f0000000100)="7c004e0f7eb6f0ae50030f1c62c166400f3a0fab0a00000004dfc5c4027d3fe566470f113b660f2f785f670f2ba80e0000002599899999", 0x4, &(0x7f0000000140)="f2df590bc46125767452e7875c3051c4e1f810f9c4e2fd1c43c1c1e3ab6546d3c63e42e200c402a947cdc4a2399ae3", {[0x1]}}, &(0x7f0000000240)={&(0x7f00000001c0)="c4a10dd5961d000000c481235c1cb42667f20f12f5f3436f42a4c4017c5aff3c2ac44178511e400f13ae00000000c481fc510b", 0x0, &(0x7f0000000200)="3e410f01d845894d07c461ff123bf0f69504000000c46331782f1ac44175facb460f6f14a9f0440fb32f450fe4167600"}, 0x8, &(0x7f0000000280)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a5377986fc254ec2862883ce7257cd4f7ae2dcfdaef81c581d1b4223e49887ee68e87ed537d5b2e957e1fac165be3eb34c5174f6279277376cbe5d10966df793456b54921f664921e1615264cc762c189704152109b0dff9eb9ca92da732cc5b46ffffff7f025485dc560b67fa9950386e7d44374265b739aa0ef8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c091b75999c66551d206c48cab1b787530de3629da0b37b211578542ae70ac9e8c0dbe754a77abd06ce2420a"], 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) 20:26:29 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x6, 0x0, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086201, &(0x7f0000000280)=0x5) ioctl$VIDIOC_G_JPEGCOMP(r3, 0x808c563d, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}, 0x1}, @in={0x2, 0x0, @empty}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}], 0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r4}) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x5c}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(0x0, 0x1, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r8 = socket$inet6(0xa, 0x80005, 0x0) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r8, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c) r9 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x0, 0x400400) r10 = gettid() syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') accept4$vsock_stream(r9, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @hyper}, 0x10, 0x80000) getgid() ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000240)) writev(r5, &(0x7f0000000080), 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) ioprio_get$pid(0x2, r10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000000000)) tkill(r10, 0x1004000000016) fgetxattr(r5, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x0, 0x0) close(r7) dup2(r9, r6) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000007c0)={[{0x7, 0x3, 0x0, 0xe2fe, 0xffffffffffffff81, 0x4, 0x4, 0xffffffffffffb1b0, 0x10000, 0x0, 0x6, 0x2}, {0x1, 0x7, 0x8, 0x8, 0x0, 0x0, 0x8, 0xd3, 0x1, 0x0, 0x3f}, {0x10000, 0x3f, 0x2, 0xea7, 0x5, 0x20, 0x4, 0x1, 0x80000001, 0x0, 0x8245, 0x0, 0x2}]}) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) timer_delete(0x0) [ 1176.539851][T19020] x_tables: duplicate underflow at hook 1 20:26:29 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0xd2, 0x0) [ 1176.613745][T19048] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 20:26:30 executing program 4: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x82) sendfile(r1, r0, 0x0, 0xa198) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x88) sendfile(r3, r2, 0x0, 0xa198) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r5 = dup2(r4, r4) ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f0000000000)=""/246) getpeername$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000080)=0x1c) [ 1176.724623][T19048] device macsec1 entered promiscuous mode [ 1176.753086][T19048] device virt_wifi0 entered promiscuous mode [ 1176.817598][T19048] device virt_wifi0 left promiscuous mode 20:26:30 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0xd3, 0x0) 20:26:30 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0xd4, 0x0) 20:26:30 executing program 1: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000180)={&(0x7f0000000100)="7c004e0f7eb6f0ae50030f1c62c166400f3a0fab0a00000004dfc5c4027d3fe566470f113b660f2f785f670f2ba80e0000002599899999", 0x4, &(0x7f0000000140)="f2df590bc46125767452e7875c3051c4e1f810f9c4e2fd1c43c1c1e3ab6546d3c63e42e200c402a947cdc4a2399ae3", {[0x1]}}, &(0x7f0000000240)={&(0x7f00000001c0)="c4a10dd5961d000000c481235c1cb42667f20f12f5f3436f42a4c4017c5aff3c2ac44178511e400f13ae00000000c481fc510b", 0x0, &(0x7f0000000200)="3e410f01d845894d07c461ff123bf0f69504000000c46331782f1ac44175facb460f6f14a9f0440fb32f450fe4167600"}, 0x8, &(0x7f0000000280)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a5377986fc254ec2862883ce7257cd4f7ae2dcfdaef81c581d1b4223e49887ee68e87ed537d5b2e957e1fac165be3eb34c5174f6279277376cbe5d10966df793456b54921f664921e1615264cc762c189704152109b0dff9eb9ca92da732cc5b46ffffff7f025485dc560b67fa9950386e7d44374265b739aa0ef8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c091b75999c66551d206c48cab1b787530de3629da0b37b211578542ae70ac9e8c0dbe754a77abd06ce2420a"], 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) 20:26:30 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x6, 0x0, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086201, &(0x7f0000000280)=0x5) ioctl$VIDIOC_G_JPEGCOMP(r3, 0x808c563d, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}, 0x1}, @in={0x2, 0x0, @empty}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}], 0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r4}) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x5c}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(0x0, 0x1, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r8 = socket$inet6(0xa, 0x80005, 0x0) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r8, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c) r9 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x0, 0x400400) r10 = gettid() syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') accept4$vsock_stream(r9, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @hyper}, 0x10, 0x80000) getgid() ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000240)) writev(r5, &(0x7f0000000080), 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) ioprio_get$pid(0x2, r10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000000000)) tkill(r10, 0x1004000000016) fgetxattr(r5, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x0, 0x0) close(r7) dup2(r9, r6) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000007c0)={[{0x7, 0x3, 0x0, 0xe2fe, 0xffffffffffffff81, 0x4, 0x4, 0xffffffffffffb1b0, 0x10000, 0x0, 0x6, 0x2}, {0x1, 0x7, 0x8, 0x8, 0x0, 0x0, 0x8, 0xd3, 0x1, 0x0, 0x3f}, {0x10000, 0x3f, 0x2, 0xea7, 0x5, 0x20, 0x4, 0x1, 0x80000001, 0x0, 0x8245, 0x0, 0x2}]}) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) timer_delete(0x0) 20:26:30 executing program 5: open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00') r2 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f0000000040)=0x80000000, 0x4) sendto(r2, &(0x7f0000000140)="120000001200e7ef007b1a3fcd00000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{0x0, 0x14e, 0x0, 0x0, 0x0, 0x24b, 0xd0}}], 0x34, 0xac0, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000440)={@broadcast, @remote}, &(0x7f0000000480)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'vcan0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="030492146c00600000000000fff57b016d2763bd56373780398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) [ 1177.588330][T19082] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 1177.637900][T19082] device macsec1 entered promiscuous mode [ 1177.651150][T19082] device virt_wifi0 entered promiscuous mode [ 1177.672105][T19082] device virt_wifi0 left promiscuous mode 20:26:31 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0xd5, 0x0) 20:26:31 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0xd6, 0x0) 20:26:31 executing program 5: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x3, 0x1) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x82) sendfile(r1, r1, 0x0, 0xa398) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) accept$netrom(r4, &(0x7f00000000c0)={{}, [@null, @bcast, @null, @rose, @rose, @rose, @netrom, @null]}, &(0x7f0000000140)=0x48) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000001580)=ANY=[], 0x119) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000580)={0x3, 0x8, 0x4, 0x200000, 0xabf7, {0x0, 0xea60}, {0x1, 0xc, 0x1f, 0x0, 0x1, 0x5, "cd5755d4"}, 0x69, 0x3, @userptr=0x4, 0x5, 0x0, r5}) sendfile(r6, r2, 0x0, 0x0) 20:26:31 executing program 1: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000180)={&(0x7f0000000100)="7c004e0f7eb6f0ae50030f1c62c166400f3a0fab0a00000004dfc5c4027d3fe566470f113b660f2f785f670f2ba80e0000002599899999", 0x4, &(0x7f0000000140)="f2df590bc46125767452e7875c3051c4e1f810f9c4e2fd1c43c1c1e3ab6546d3c63e42e200c402a947cdc4a2399ae3", {[0x1]}}, &(0x7f0000000240)={&(0x7f00000001c0)="c4a10dd5961d000000c481235c1cb42667f20f12f5f3436f42a4c4017c5aff3c2ac44178511e400f13ae00000000c481fc510b", 0x0, &(0x7f0000000200)="3e410f01d845894d07c461ff123bf0f69504000000c46331782f1ac44175facb460f6f14a9f0440fb32f450fe4167600"}, 0x8, &(0x7f0000000280)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a5377986fc254ec2862883ce7257cd4f7ae2dcfdaef81c581d1b4223e49887ee68e87ed537d5b2e957e1fac165be3eb34c5174f6279277376cbe5d10966df793456b54921f664921e1615264cc762c189704152109b0dff9eb9ca92da732cc5b46ffffff7f025485dc560b67fa9950386e7d44374265b739aa0ef8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c091b75999c66551d206c48cab1b787530de3629da0b37b211578542ae70ac9e8c0dbe754a77abd06ce2420a"], 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) 20:26:31 executing program 4: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x82) sendfile(r1, r0, 0x0, 0xa198) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={r1, 0x10, 0x1, 0xfffffffa, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}, 0x20) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r3, r2, 0x0, 0xa198) [ 1178.343521][T19111] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 20:26:31 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0xd7, 0x0) [ 1178.476338][T19111] device macsec1 entered promiscuous mode [ 1178.483249][T19111] device virt_wifi0 entered promiscuous mode [ 1178.511218][T19111] device virt_wifi0 left promiscuous mode 20:26:31 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x6, 0x0, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086201, &(0x7f0000000280)=0x5) ioctl$VIDIOC_G_JPEGCOMP(r3, 0x808c563d, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}, 0x1}, @in={0x2, 0x0, @empty}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}], 0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r4}) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x5c}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(0x0, 0x1, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r8 = socket$inet6(0xa, 0x80005, 0x0) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r8, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c) r9 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x0, 0x400400) r10 = gettid() syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') accept4$vsock_stream(r9, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @hyper}, 0x10, 0x80000) getgid() ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000240)) writev(r5, &(0x7f0000000080), 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) ioprio_get$pid(0x2, r10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000000000)) tkill(r10, 0x1004000000016) fgetxattr(r5, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x0, 0x0) close(r7) dup2(r9, r6) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0xbba}, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000007c0)={[{0x7, 0x3, 0x0, 0xe2fe, 0xffffffffffffff81, 0x4, 0x4, 0xffffffffffffb1b0, 0x10000, 0x0, 0x6, 0x2}, {0x1, 0x7, 0x8, 0x8, 0x0, 0x0, 0x8, 0xd3, 0x1, 0x0, 0x3f}, {0x10000, 0x3f, 0x2, 0xea7, 0x5, 0x20, 0x4, 0x1, 0x80000001, 0x0, 0x8245, 0x0, 0x2}]}) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) timer_delete(0x0) 20:26:32 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0xd8, 0x0) [ 1179.166059][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 1179.166080][ T28] audit: type=1804 audit(1590265592.495:953): pid=19140 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir374862090/syzkaller.5NWs5l/1134/file0" dev="sda1" ino=16335 res=1 20:26:32 executing program 1: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000180)={&(0x7f0000000100)="7c004e0f7eb6f0ae50030f1c62c166400f3a0fab0a00000004dfc5c4027d3fe566470f113b660f2f785f670f2ba80e0000002599899999", 0x4, &(0x7f0000000140)="f2df590bc46125767452e7875c3051c4e1f810f9c4e2fd1c43c1c1e3ab6546d3c63e42e200c402a947cdc4a2399ae3", {[0x1]}}, &(0x7f0000000240)={&(0x7f00000001c0)="c4a10dd5961d000000c481235c1cb42667f20f12f5f3436f42a4c4017c5aff3c2ac44178511e400f13ae00000000c481fc510b", 0x0, &(0x7f0000000200)="3e410f01d845894d07c461ff123bf0f69504000000c46331782f1ac44175facb460f6f14a9f0440fb32f450fe4167600"}, 0x8, &(0x7f0000000280)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a5377986fc254ec2862883ce7257cd4f7ae2dcfdaef81c581d1b4223e49887ee68e87ed537d5b2e957e1fac165be3eb34c5174f6279277376cbe5d10966df793456b54921f664921e1615264cc762c189704152109b0dff9eb9ca92da732cc5b46ffffff7f025485dc560b67fa9950386e7d44374265b739aa0ef8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c091b75999c66551d206c48cab1b787530de3629da0b37b211578542ae70ac9e8c0dbe754a77abd06ce2420a"], 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) [ 1179.321160][ T28] audit: type=1804 audit(1590265592.535:954): pid=19113 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir984313495/syzkaller.4Sv1HN/1025/file0" dev="sda1" ino=16325 res=1 20:26:32 executing program 5: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x82) sendfile(r1, r0, 0x0, 0xa198) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000001580)=ANY=[], 0x119) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r5 = dup2(r4, r4) ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f0000000000)=""/246) renameat2(r5, &(0x7f0000000000)='./file0\x00', r3, &(0x7f0000000080)='./file0\x00', 0x5) sendfile(r3, r2, 0x0, 0xa198) 20:26:32 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0xd9, 0x0) [ 1179.448874][ T28] audit: type=1804 audit(1590265592.545:955): pid=19119 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir984313495/syzkaller.4Sv1HN/1025/file0" dev="sda1" ino=16325 res=1 [ 1179.477732][T19151] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 20:26:32 executing program 4: r0 = open(&(0x7f0000000000)='./file0\x00', 0xc2142, 0x180) r1 = open(&(0x7f0000000040)='./file0\x00', 0x155042, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x400000000000030, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x400000000000030, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRESDEC, @ANYRESHEX], 0x82) sendfile(r1, r0, 0x0, 0xa198) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r5, r4, 0x0, 0xa198) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10) connect$inet(r6, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x400000000000030, 0x0) preadv(r6, &(0x7f0000000000), 0x0, 0xb36) [ 1179.599152][T19151] device macsec1 entered promiscuous mode [ 1179.625766][T19151] device virt_wifi0 entered promiscuous mode [ 1179.682373][ T28] audit: type=1804 audit(1590265593.005:956): pid=19162 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir984313495/syzkaller.4Sv1HN/1026/file0" dev="sda1" ino=16253 res=1 [ 1179.705826][T19151] device virt_wifi0 left promiscuous mode [ 1179.861126][ T28] audit: type=1804 audit(1590265593.025:957): pid=19162 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir984313495/syzkaller.4Sv1HN/1026/file0" dev="sda1" ino=16253 res=1 [ 1180.123054][ T28] audit: type=1804 audit(1590265593.105:958): pid=19163 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir374862090/syzkaller.5NWs5l/1135/file0" dev="sda1" ino=16335 res=1 20:26:33 executing program 4: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r1 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_SUBDEV_G_CROP(r1, 0xc038563b, &(0x7f0000000100)={0x0, 0x0, {0x5461, 0x8, 0x9, 0x4}}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r2, &(0x7f0000000480)=ANY=[], 0x82) getsockname$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000080)=0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10) connect$inet(r5, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x400000000000030, 0x0) ioctl$VIDIOC_QUERYBUF(r4, 0xc0585609, &(0x7f0000000200)={0x0, 0xc, 0x4, 0x10000, 0x9, {}, {0x1, 0x2, 0x8, 0x9, 0x0, 0x1, "0ed0e01f"}, 0x5, 0x3, @planes=&(0x7f0000000140)={0x8, 0x5370b135, @fd, 0x3}, 0x7, 0x0, r5}) ioctl$NBD_SET_SIZE(r6, 0xab02, 0x200) sendfile(r2, r0, 0x0, 0xa198) r7 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r8 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r8, r7, 0x0, 0xa198) [ 1180.241596][ T28] audit: type=1804 audit(1590265593.105:959): pid=19163 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir374862090/syzkaller.5NWs5l/1135/file0" dev="sda1" ino=16335 res=1 [ 1180.266290][ T28] audit: type=1804 audit(1590265593.195:960): pid=19166 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir374862090/syzkaller.5NWs5l/1135/file0" dev="sda1" ino=16335 res=1 20:26:33 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0xda, 0x0) [ 1180.304087][ T28] audit: type=1804 audit(1590265593.215:961): pid=19166 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir374862090/syzkaller.5NWs5l/1135/file0" dev="sda1" ino=16335 res=1 20:26:33 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x6, 0x0, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086201, &(0x7f0000000280)=0x5) ioctl$VIDIOC_G_JPEGCOMP(r3, 0x808c563d, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}, 0x1}, @in={0x2, 0x0, @empty}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}], 0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r4}) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x5c}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(0x0, 0x1, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r8 = socket$inet6(0xa, 0x80005, 0x0) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r8, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c) r9 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x0, 0x400400) r10 = gettid() syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') accept4$vsock_stream(r9, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @hyper}, 0x10, 0x80000) getgid() ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000240)) writev(r5, &(0x7f0000000080), 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) ioprio_get$pid(0x2, r10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000000000)) tkill(r10, 0x1004000000016) fgetxattr(r5, &(0x7f0000000840)=ANY=[@ANYBLOB="a50500714f7f7100d340200007d2644a6dc2ebdbd5db1f0867e0c40e01380ec99c6dcf2b0bef2533fdea38cd4ecd9f1d377a4a4aff9ec836959ff1a0191bd4bad0b8fe12bb4d78471a2f990c3776675c0dcdab4b39f584bca23a7a2fc19b27bc9b71e8ae59f42a718a3dec8d4374db63d9d795b0ff05c117aa5702290b3103bc28aec5801bb39ebdd5c3be0000000080000000e59b3dbaf1eb15fced2d000000000000000000000040000000000d2e45dfffb6c050f46226daadc63659168a50dda734148a8fe4d5b99b43e2edb3fe3e754d26bc8c16c313ea9c5bbd35d600702cfce25becac92fde18fa3701cb6b04eb84375191fd8b6ed74e535c990d82524dd5f8997e0930060bda93c57d6a9597a9ba79eb57071b5a49b61ec0fc5fee99c8d4984c400c7fef3cbec8abd2f191c94c41ae90c000000000000cf5406b34abd6f3ae8dc2fea6e5ed50649b862a7f665f095e1fd41b083596db8162f405d241c5bf97c009e6a702ce6408bc1cbd4e0c86692a484a9ad8959fb62f028a0dd925761dc08f1ae0ec4888ac7a64e36bd4093e555efee1780107e0e7039b3d3fc0290f93b7222de47e4a1e9f757ac6c5b9dc9ba4b2ebbc92a6e6c3f27f1b797634d06000000d8836651ba9beb008377323cdd69e464db54236c5663421c20f1142589c9b30fb74b378300000000000000000000f9d7ec43bed2988d5dd4fc8dc9841bfbf39d6968a1e41654fa965fe3e38cabc0e4fd7b1f04c0f69baae5767ece069beaf6dc87c4a0fd11d838c0dac7f5457f7531442cb4e1c48638768969c107039ce237c49bf5ca2862750ea66d48f1f2785cb81ec94a1f57dbbf9608b016decfd66f2d94b381c8ffc593a993d6861deca12cda5faf0ff4cd169ae7c52e2f872e1cc8488f6043c528f40c66c42c754e70dc9817c930f52e2fcf1f7b7c25f77ab96fc06baeec662d46ab333610c123394df2b4a9a57e13ec4dd6115488719f6e8384f25a97ee11e3a44ff524185bd4084146507c2735fdf427dd60220a66ebb5ac78ffe5646cf149a16fe3e5e1cba005ab2954d8c3f8ade1ddf979dd99ae3326b4383ea8cc41dfa1619df8bdbb186849df5891cb4d70000000001c9d85747b4617e35bfad5bbe3003cbfaa3eaa7e68ab928032a1338613f3ddb320f74a9a166d9075b6432401938c33c7f13db04c3599e7ced7b59f5f9f821d06889346b3a982253f3523ece1c9a1517b455206ad6f65aa5aa3f324e9b6d090f2d67e7452c450eceda06fd77a3dd2e085541caa961529f246a2d344b1e9c01b0efb78179a28042c79bc26f71f3766f745ecad7ba420b2556ddcf29d01626288174d54b0ef8cac5e2e33b3fa2c7782a66b2a6ce0a1c668f86d6235782e8b8a5c201e1154ef4f37657e9cc8d616c2bd8d9dba80f7048c93961619459863a05cb640b1b17ed290ec4fd2b190f37a8d63ef3088f5ccd137d66f5cb45d6beddeb4f8f3d4918840d8c0b804e3738b64fd8bbf3fd74b8e8411918ccf495fea0bf1611903da79ad10f2a73299b371"], 0x0, 0x0) close(r7) dup2(r9, r6) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0xbba}, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000007c0)={[{0x7, 0x3, 0x0, 0xe2fe, 0xffffffffffffff81, 0x4, 0x4, 0xffffffffffffb1b0, 0x10000, 0x0, 0x6, 0x2}, {0x1, 0x7, 0x8, 0x8, 0x0, 0x0, 0x8, 0xd3, 0x1, 0x0, 0x3f}, {0x10000, 0x3f, 0x2, 0xea7, 0x5, 0x20, 0x4, 0x1, 0x80000001, 0x0, 0x8245, 0x0, 0x2}]}) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) timer_delete(0x0) [ 1180.431233][ T28] audit: type=1804 audit(1590265593.756:962): pid=19183 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir984313495/syzkaller.4Sv1HN/1026/file0" dev="sda1" ino=16253 res=1 20:26:33 executing program 1: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000180)={&(0x7f0000000100)="7c004e0f7eb6f0ae50030f1c62c166400f3a0fab0a00000004dfc5c4027d3fe566470f113b660f2f785f670f2ba80e0000002599899999", 0x4, &(0x7f0000000140)="f2df590bc46125767452e7875c3051c4e1f810f9c4e2fd1c43c1c1e3ab6546d3c63e42e200c402a947cdc4a2399ae3", {[0x1]}}, &(0x7f0000000240)={&(0x7f00000001c0)="c4a10dd5961d000000c481235c1cb42667f20f12f5f3436f42a4c4017c5aff3c2ac44178511e400f13ae00000000c481fc510b", 0x0, &(0x7f0000000200)="3e410f01d845894d07c461ff123bf0f69504000000c46331782f1ac44175facb460f6f14a9f0440fb32f450fe4167600"}, 0x8, &(0x7f0000000280)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a5377986fc254ec2862883ce7257cd4f7ae2dcfdaef81c581d1b4223e49887ee68e87ed537d5b2e957e1fac165be3eb34c5174f6279277376cbe5d10966df793456b54921f664921e1615264cc762c189704152109b0dff9eb9ca92da732cc5b46ffffff7f025485dc560b67fa9950386e7d44374265b739aa0ef8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c091b75999c66551d206c48cab1b787530de3629da0b37b211578542ae70ac9e8c0dbe754a77abd06ce2420a"], 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) 20:26:33 executing program 5: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x82) sendfile(r1, r0, 0x0, 0xa198) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000001580)=ANY=[], 0x119) sendfile(r3, r2, 0x0, 0xa198) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x400000000000030, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) [ 1180.674681][T19189] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 20:26:34 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0xdb, 0x0) [ 1180.888607][T19189] device macsec1 entered promiscuous mode [ 1180.915612][T19189] device virt_wifi0 entered promiscuous mode [ 1181.005524][T19189] device virt_wifi0 left promiscuous mode 20:26:34 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0xdc, 0x0) 20:26:35 executing program 1: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000180)={&(0x7f0000000100)="7c004e0f7eb6f0ae50030f1c62c166400f3a0fab0a00000004dfc5c4027d3fe566470f113b660f2f785f670f2ba80e0000002599899999", 0x4, &(0x7f0000000140)="f2df590bc46125767452e7875c3051c4e1f810f9c4e2fd1c43c1c1e3ab6546d3c63e42e200c402a947cdc4a2399ae3", {[0x1]}}, &(0x7f0000000240)={&(0x7f00000001c0)="c4a10dd5961d000000c481235c1cb42667f20f12f5f3436f42a4c4017c5aff3c2ac44178511e400f13ae00000000c481fc510b", 0x0, &(0x7f0000000200)="3e410f01d845894d07c461ff123bf0f69504000000c46331782f1ac44175facb460f6f14a9f0440fb32f450fe4167600"}, 0x8, &(0x7f0000000280)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a5377986fc254ec2862883ce7257cd4f7ae2dcfdaef81c581d1b4223e49887ee68e87ed537d5b2e957e1fac165be3eb34c5174f6279277376cbe5d10966df793456b54921f664921e1615264cc762c189704152109b0dff9eb9ca92da732cc5b46ffffff7f025485dc560b67fa9950386e7d44374265b739aa0ef8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c091b75999c66551d206c48cab1b787530de3629da0b37b211578542ae70ac9e8c0dbe754a77abd06ce2420a"], 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) 20:26:35 executing program 4: open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[], 0x82) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x301000, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x20010, r1, 0x10000000) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x46) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000000)=0x9) sendfile(0xffffffffffffffff, r2, 0x0, 0xa198) [ 1181.839402][T19219] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 20:26:35 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x6, 0x0, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086201, &(0x7f0000000280)=0x5) ioctl$VIDIOC_G_JPEGCOMP(r3, 0x808c563d, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}, 0x1}, @in={0x2, 0x0, @empty}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}], 0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r4}) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x5c}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(0x0, 0x1, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r8 = socket$inet6(0xa, 0x80005, 0x0) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r8, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c) r9 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x0, 0x400400) r10 = gettid() syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') accept4$vsock_stream(r9, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @hyper}, 0x10, 0x80000) getgid() ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000240)) writev(r5, &(0x7f0000000080), 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) ioprio_get$pid(0x2, r10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000000000)) tkill(r10, 0x1004000000016) fgetxattr(r5, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x0, 0x0) close(r7) dup2(r9, r6) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0xbba}, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000007c0)={[{0x7, 0x3, 0x0, 0xe2fe, 0xffffffffffffff81, 0x4, 0x4, 0xffffffffffffb1b0, 0x10000, 0x0, 0x6, 0x2}, {0x1, 0x7, 0x8, 0x8, 0x0, 0x0, 0x8, 0xd3, 0x1, 0x0, 0x3f}, {0x10000, 0x3f, 0x2, 0xea7, 0x5, 0x20, 0x4, 0x1, 0x80000001, 0x0, 0x8245, 0x0, 0x2}]}) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) timer_delete(0x0) [ 1181.898460][T19219] device macsec1 entered promiscuous mode [ 1181.920549][T19219] device virt_wifi0 entered promiscuous mode [ 1181.956388][T19219] device virt_wifi0 left promiscuous mode 20:26:35 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0xdd, 0x0) 20:26:35 executing program 4: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x82) sendfile(r1, r0, 0x0, 0xa198) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r3, r2, 0x0, 0xa198) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r5 = dup2(r4, r4) ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$NBD_CLEAR_SOCK(r5, 0xab04) 20:26:35 executing program 5: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x341102, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x82) sendfile(r1, r0, 0x0, 0xa198) open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000001580)=ANY=[], 0x119) socket$caif_seqpacket(0x25, 0x5, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x2, @rand_addr=0x7fffffff}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x400000000000030, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='syzkaller0\x00', 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0xfffe, @dev={0xac, 0x14, 0x14, 0x27}}, 0xf) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendfile(r4, r2, 0x0, 0xa398) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x42000, 0x0) getsockopt$inet_buf(r5, 0x0, 0x0, &(0x7f0000000200)=""/4096, &(0x7f0000000080)=0x1000) 20:26:35 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0xde, 0x0) 20:26:35 executing program 5: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x82) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x1090, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_off='xino=off'}, {@index_on='index=on'}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@index_off='index=off'}, {@metacopy_off='metacopy=off'}], [{@permit_directio='permit_directio'}, {@permit_directio='permit_directio'}, {@obj_user={'obj_user', 0x3d, '('}}, {@pcr={'pcr', 0x3d, 0x9}}]}) sendfile(r1, r0, 0x0, 0xa198) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000001580)=ANY=[], 0x119) sendfile(r3, r2, 0x0, 0xa198) bind$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @host}, 0x10) 20:26:35 executing program 1: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000180)={&(0x7f0000000100)="7c004e0f7eb6f0ae50030f1c62c166400f3a0fab0a00000004dfc5c4027d3fe566470f113b660f2f785f670f2ba80e0000002599899999", 0x4, &(0x7f0000000140)="f2df590bc46125767452e7875c3051c4e1f810f9c4e2fd1c43c1c1e3ab6546d3c63e42e200c402a947cdc4a2399ae3", {[0x1]}}, &(0x7f0000000240)={&(0x7f00000001c0)="c4a10dd5961d000000c481235c1cb42667f20f12f5f3436f42a4c4017c5aff3c2ac44178511e400f13ae00000000c481fc510b", 0x0, &(0x7f0000000200)="3e410f01d845894d07c461ff123bf0f69504000000c46331782f1ac44175facb460f6f14a9f0440fb32f450fe4167600"}, 0x8, &(0x7f0000000280)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a5377986fc254ec2862883ce7257cd4f7ae2dcfdaef81c581d1b4223e49887ee68e87ed537d5b2e957e1fac165be3eb34c5174f6279277376cbe5d10966df793456b54921f664921e1615264cc762c189704152109b0dff9eb9ca92da732cc5b46ffffff7f025485dc560b67fa9950386e7d44374265b739aa0ef8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c091b75999c66551d206c48cab1b787530de3629da0b37b211578542ae70ac9e8c0dbe754a77abd06ce2420a"], 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) [ 1182.786369][T19254] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 20:26:36 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x6, 0x0, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086201, &(0x7f0000000280)=0x5) ioctl$VIDIOC_G_JPEGCOMP(r3, 0x808c563d, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}, 0x1}, @in={0x2, 0x0, @empty}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}], 0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r4}) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x5c}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(0x0, 0x1, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r8 = socket$inet6(0xa, 0x80005, 0x0) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r8, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c) r9 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x0, 0x400400) r10 = gettid() syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') accept4$vsock_stream(r9, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @hyper}, 0x10, 0x80000) getgid() ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000240)) writev(r5, &(0x7f0000000080), 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) ioprio_get$pid(0x2, r10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000000000)) tkill(r10, 0x1004000000016) fgetxattr(r5, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x0, 0x0) close(r7) dup2(r9, r6) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0xbba}, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000007c0)={[{0x7, 0x3, 0x0, 0xe2fe, 0xffffffffffffff81, 0x4, 0x4, 0xffffffffffffb1b0, 0x10000, 0x0, 0x6, 0x2}, {0x1, 0x7, 0x8, 0x8, 0x0, 0x0, 0x8, 0xd3, 0x1, 0x0, 0x3f}, {0x10000, 0x3f, 0x2, 0xea7, 0x5, 0x20, 0x4, 0x1, 0x80000001, 0x0, 0x8245, 0x0, 0x2}]}) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) timer_delete(0x0) [ 1182.954438][T19254] device macsec1 entered promiscuous mode [ 1183.002115][T19254] device virt_wifi0 entered promiscuous mode [ 1183.070862][T19254] device virt_wifi0 left promiscuous mode 20:26:36 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0xdf, 0x0) 20:26:36 executing program 5: open(&(0x7f00000001c0)='./file0\x00', 0xc67c2, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[], 0x82) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) sendfile(r0, r1, 0x0, 0x100000000) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000001580)=ANY=[], 0x119) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r5 = dup2(r4, r4) ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r5, 0xc2604111, &(0x7f0000000200)={0x2de, [[0x3, 0x6, 0x3, 0x1, 0x2, 0xffff, 0xffffffff, 0x9], [0x10000, 0x6a, 0x6, 0x2, 0x1073, 0x6c2, 0x7, 0x3000000], [0xfffffff9, 0x4, 0x0, 0xbb0e, 0x7f, 0x0, 0xfffffbff, 0x4]], [], [{0x3, 0x2, 0x0, 0x1, 0x1, 0x1}, {0x5, 0x10000, 0x0, 0x1, 0x1}, {0x7, 0x1, 0x1, 0x1, 0x1}, {0x81, 0x3, 0x0, 0x1, 0x0, 0x1}, {0x8000, 0xada, 0x1, 0x0, 0x1, 0x1}, {0x5, 0x40, 0x1, 0x1, 0x1}, {0x50, 0xa07}, {0x4, 0xfffffffd, 0x1, 0x1, 0x1}, {0x27d}, {0x40, 0x3, 0x0, 0x1}, {0x8, 0x8001, 0x0, 0x1, 0x0, 0x1}, {0x5, 0x0, 0x1, 0x0, 0x0, 0x1}], [], 0x88}) sendfile(r3, r2, 0x0, 0xa198) 20:26:36 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0xe0, 0x0) 20:26:37 executing program 1: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000180)={&(0x7f0000000100)="7c004e0f7eb6f0ae50030f1c62c166400f3a0fab0a00000004dfc5c4027d3fe566470f113b660f2f785f670f2ba80e0000002599899999", 0x4, &(0x7f0000000140)="f2df590bc46125767452e7875c3051c4e1f810f9c4e2fd1c43c1c1e3ab6546d3c63e42e200c402a947cdc4a2399ae3", {[0x1]}}, &(0x7f0000000240)={&(0x7f00000001c0)="c4a10dd5961d000000c481235c1cb42667f20f12f5f3436f42a4c4017c5aff3c2ac44178511e400f13ae00000000c481fc510b", 0x0, &(0x7f0000000200)="3e410f01d845894d07c461ff123bf0f69504000000c46331782f1ac44175facb460f6f14a9f0440fb32f450fe4167600"}, 0x8, &(0x7f0000000280)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a5377986fc254ec2862883ce7257cd4f7ae2dcfdaef81c581d1b4223e49887ee68e87ed537d5b2e957e1fac165be3eb34c5174f6279277376cbe5d10966df793456b54921f664921e1615264cc762c189704152109b0dff9eb9ca92da732cc5b46ffffff7f025485dc560b67fa9950386e7d44374265b739aa0ef8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c091b75999c66551d206c48cab1b787530de3629da0b37b211578542ae70ac9e8c0dbe754a77abd06ce2420a"], 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) [ 1183.759632][T19284] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 20:26:37 executing program 4: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x82) sendfile(r1, r0, 0x0, 0xa198) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r3, r2, 0x0, 0xa198) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r5 = dup2(r4, r4) ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f0000000000)=""/246) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r7 = dup2(r6, r6) ioctl$EVIOCGPROP(r7, 0xc004743e, &(0x7f0000000000)=""/246) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0x7, &(0x7f0000000140)={0x6, 0x6, 0x20, 0x7f}, 0x10) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000000)=""/246) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000200)={0x43, 0x9, 0x2, {0x9, 0x1000, 0x1ff, 0x6, 0x4, 0xb8, 0xfffffffffffffff7, 0x7, 0x9}}, 0x43) r9 = dup2(r8, r8) ioctl$EVIOCGPROP(r9, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$VIDIOC_EXPBUF(r5, 0xc0405610, &(0x7f0000000000)={0x9, 0x3f, 0x9, 0x80800, r9}) [ 1183.820589][T19284] device macsec1 entered promiscuous mode [ 1183.843784][T19284] device virt_wifi0 entered promiscuous mode [ 1183.878106][T19284] device virt_wifi0 left promiscuous mode 20:26:37 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0xe1, 0x0) 20:26:37 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x6, 0x0, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086201, &(0x7f0000000280)=0x5) ioctl$VIDIOC_G_JPEGCOMP(r3, 0x808c563d, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}, 0x1}, @in={0x2, 0x0, @empty}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}], 0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r4}) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x5c}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(0x0, 0x1, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r8 = socket$inet6(0xa, 0x80005, 0x0) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r8, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c) r9 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x0, 0x400400) r10 = gettid() syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') accept4$vsock_stream(r9, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @hyper}, 0x10, 0x80000) getgid() ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000240)) writev(r5, &(0x7f0000000080), 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) ioprio_get$pid(0x2, r10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000000000)) tkill(r10, 0x1004000000016) fgetxattr(r5, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x0, 0x0) close(r7) dup2(r9, r6) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0xbba}, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000007c0)={[{0x7, 0x3, 0x0, 0xe2fe, 0xffffffffffffff81, 0x4, 0x4, 0xffffffffffffb1b0, 0x10000, 0x0, 0x6, 0x2}, {0x1, 0x7, 0x8, 0x8, 0x0, 0x0, 0x8, 0xd3, 0x1, 0x0, 0x3f}, {0x10000, 0x3f, 0x2, 0xea7, 0x5, 0x20, 0x4, 0x1, 0x80000001, 0x0, 0x8245, 0x0, 0x2}]}) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) timer_delete(0x0) 20:26:37 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0xe2, 0x0) [ 1184.563511][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 1184.563529][ T28] audit: type=1804 audit(1590265597.896:992): pid=19277 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir984313495/syzkaller.4Sv1HN/1030/file0" dev="sda1" ino=16313 res=1 20:26:38 executing program 5: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r2 = dup2(r1, r1) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000000)=""/246) write$P9_RREADDIR(r2, &(0x7f0000000080)={0xc5, 0x29, 0x2, {0x22068ead, [{{0x95, 0x2, 0x1}, 0x8, 0x4, 0x7, './file0'}, {{0x10, 0x1, 0x4}, 0x8, 0x8, 0x7, './file0'}, {{0x10, 0x1, 0x7}, 0x7dc, 0x6, 0x7, './file0'}, {{0x4, 0x1, 0x3}, 0x7, 0xca, 0x7, './file0'}, {{0x80, 0x0, 0x5}, 0x1, 0x1, 0x7, './file0'}, {{0x20, 0x0, 0x2}, 0x7, 0x0, 0x7, './file0'}]}}, 0xc5) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r3, &(0x7f0000000480)=ANY=[], 0x82) sendfile(r3, r0, 0x0, 0xa198) open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000001580)=ANY=[], 0x119) 20:26:38 executing program 1: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000180)={&(0x7f0000000100)="7c004e0f7eb6f0ae50030f1c62c166400f3a0fab0a00000004dfc5c4027d3fe566470f113b660f2f785f670f2ba80e0000002599899999", 0x4, &(0x7f0000000140)="f2df590bc46125767452e7875c3051c4e1f810f9c4e2fd1c43c1c1e3ab6546d3c63e42e200c402a947cdc4a2399ae3", {[0x1]}}, &(0x7f0000000240)={&(0x7f00000001c0)="c4a10dd5961d000000c481235c1cb42667f20f12f5f3436f42a4c4017c5aff3c2ac44178511e400f13ae00000000c481fc510b", 0x0, &(0x7f0000000200)="3e410f01d845894d07c461ff123bf0f69504000000c46331782f1ac44175facb460f6f14a9f0440fb32f450fe4167600"}, 0x8, &(0x7f0000000280)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a5377986fc254ec2862883ce7257cd4f7ae2dcfdaef81c581d1b4223e49887ee68e87ed537d5b2e957e1fac165be3eb34c5174f6279277376cbe5d10966df793456b54921f664921e1615264cc762c189704152109b0dff9eb9ca92da732cc5b46ffffff7f025485dc560b67fa9950386e7d44374265b739aa0ef8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c091b75999c66551d206c48cab1b787530de3629da0b37b211578542ae70ac9e8c0dbe754a77abd06ce2420a"], 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) [ 1184.753219][ T28] audit: type=1804 audit(1590265597.896:993): pid=19309 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir984313495/syzkaller.4Sv1HN/1030/file0" dev="sda1" ino=16313 res=1 [ 1184.762326][T19318] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 1184.825228][T19318] device macsec1 entered promiscuous mode [ 1184.834651][T19318] device virt_wifi0 entered promiscuous mode [ 1184.857576][T19318] device virt_wifi0 left promiscuous mode 20:26:38 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0xe3, 0x0) [ 1184.976014][ T28] audit: type=1804 audit(1590265598.306:994): pid=19325 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir984313495/syzkaller.4Sv1HN/1031/file0" dev="sda1" ino=16335 res=1 [ 1185.092921][ T28] audit: type=1804 audit(1590265598.346:995): pid=19325 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir984313495/syzkaller.4Sv1HN/1031/file0" dev="sda1" ino=16335 res=1 20:26:38 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x6, 0x0, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086201, &(0x7f0000000280)=0x5) ioctl$VIDIOC_G_JPEGCOMP(r3, 0x808c563d, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}, 0x1}, @in={0x2, 0x0, @empty}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}], 0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r4}) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x5c}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(0x0, 0x1, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r8 = socket$inet6(0xa, 0x80005, 0x0) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r8, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c) r9 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x0, 0x400400) r10 = gettid() syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') accept4$vsock_stream(r9, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @hyper}, 0x10, 0x80000) getgid() ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000240)) writev(r5, &(0x7f0000000080), 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) ioprio_get$pid(0x2, r10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000000000)) tkill(r10, 0x1004000000016) fgetxattr(r5, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x0, 0x0) close(r7) dup2(r9, r6) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0xbba}, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000007c0)={[{0x7, 0x3, 0x0, 0xe2fe, 0xffffffffffffff81, 0x4, 0x4, 0xffffffffffffb1b0, 0x10000, 0x0, 0x6, 0x2}, {0x1, 0x7, 0x8, 0x8, 0x0, 0x0, 0x8, 0xd3, 0x1, 0x0, 0x3f}, {0x10000, 0x3f, 0x2, 0xea7, 0x5, 0x20, 0x4, 0x1, 0x80000001, 0x0, 0x8245, 0x0, 0x2}]}) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) timer_delete(0x0) [ 1185.334629][ T28] audit: type=1804 audit(1590265598.666:996): pid=19294 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir374862090/syzkaller.5NWs5l/1139/file0" dev="sda1" ino=16244 res=1 20:26:38 executing program 1: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000180)={&(0x7f0000000100)="7c004e0f7eb6f0ae50030f1c62c166400f3a0fab0a00000004dfc5c4027d3fe566470f113b660f2f785f670f2ba80e0000002599899999", 0x4, &(0x7f0000000140)="f2df590bc46125767452e7875c3051c4e1f810f9c4e2fd1c43c1c1e3ab6546d3c63e42e200c402a947cdc4a2399ae3", {[0x1]}}, &(0x7f0000000240)={&(0x7f00000001c0)="c4a10dd5961d000000c481235c1cb42667f20f12f5f3436f42a4c4017c5aff3c2ac44178511e400f13ae00000000c481fc510b", 0x0, &(0x7f0000000200)="3e410f01d845894d07c461ff123bf0f69504000000c46331782f1ac44175facb460f6f14a9f0440fb32f450fe4167600"}, 0x8, &(0x7f0000000280)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a5377986fc254ec2862883ce7257cd4f7ae2dcfdaef81c581d1b4223e49887ee68e87ed537d5b2e957e1fac165be3eb34c5174f6279277376cbe5d10966df793456b54921f664921e1615264cc762c189704152109b0dff9eb9ca92da732cc5b46ffffff7f025485dc560b67fa9950386e7d44374265b739aa0ef8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c091b75999c66551d206c48cab1b787530de3629da0b37b211578542ae70ac9e8c0dbe754a77abd06ce2420a"], 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) [ 1185.469279][ T28] audit: type=1804 audit(1590265598.666:997): pid=19292 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir374862090/syzkaller.5NWs5l/1139/file0" dev="sda1" ino=16244 res=1 [ 1185.481812][T19340] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 20:26:38 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000000)=""/246) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000000)={0x3, "9f26f3"}, 0x4) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x400000000000030, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @loopback}, {0x2, 0x4e21, @private=0xa010101}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x31}}, 0x20c, 0x0, 0x0, 0x0, 0x957e, &(0x7f0000000180)='syz_tun\x00', 0x4b, 0x5, 0x9}) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r4, &(0x7f0000000480)=ANY=[], 0x82) sendfile(r4, r2, 0x0, 0xa198) clone(0x40001000, &(0x7f0000000280)="17b4cc907c0d1e72dd49cfac544602d7be6cd3f02c492738798f0c30a68291851aaae1448897a93348570d9469c74e6bd6cf81ab124e2d4b3d2dafc4ea18b0a74c610184ac2c1a868a82f95b4ac2d448daeeaa9e4c9d9b3793d70709558622676d3222bd5bcdfdb530351de258c734cdc07b66a1ce073b4c6d8320778b853dc35e5f78be36b5e06f0d05", &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)="3648c2111afc455efebb1e7b683dcdc2345612db7a14fcea754bd7937bddf34cebb29185d2d73d4546e622831d0cfc9adb2a6ef4c18e866aef3f2ffe43b265f5e6c612fbbdd3c5bcd03fe3ca90d2f387ec655b91f8c7c6077921210784ad") r5 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r6 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$VFIO_IOMMU_UNMAP_DMA(r6, 0x3b72, &(0x7f0000000140)={0x18, 0x3}) open_tree(r5, &(0x7f0000000440)='./file0\x00', 0x80100) sendfile(r6, r5, 0x0, 0xa198) [ 1185.560601][T19340] device macsec1 entered promiscuous mode [ 1185.566909][T19340] device virt_wifi0 entered promiscuous mode 20:26:38 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0xe4, 0x0) [ 1185.591857][ T28] audit: type=1804 audit(1590265598.696:998): pid=19292 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir374862090/syzkaller.5NWs5l/1139/file0" dev="sda1" ino=16244 res=1 [ 1185.622631][T19340] device virt_wifi0 left promiscuous mode 20:26:39 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0xe5, 0x0) [ 1186.003659][ T28] audit: type=1804 audit(1590265599.336:999): pid=19357 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir374862090/syzkaller.5NWs5l/1140/file0" dev="sda1" ino=16203 res=1 [ 1186.031930][T19356] IPVS: ftp: loaded support on port[0] = 21 [ 1186.117774][ T28] audit: type=1804 audit(1590265599.406:1000): pid=19359 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir374862090/syzkaller.5NWs5l/1140/file0" dev="sda1" ino=16203 res=1 [ 1186.314064][T19356] netdevsim0 speed is unknown, defaulting to 1000 20:26:39 executing program 1: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000180)={&(0x7f0000000100)="7c004e0f7eb6f0ae50030f1c62c166400f3a0fab0a00000004dfc5c4027d3fe566470f113b660f2f785f670f2ba80e0000002599899999", 0x4, &(0x7f0000000140)="f2df590bc46125767452e7875c3051c4e1f810f9c4e2fd1c43c1c1e3ab6546d3c63e42e200c402a947cdc4a2399ae3", {[0x1]}}, &(0x7f0000000240)={&(0x7f00000001c0)="c4a10dd5961d000000c481235c1cb42667f20f12f5f3436f42a4c4017c5aff3c2ac44178511e400f13ae00000000c481fc510b", 0x0, &(0x7f0000000200)="3e410f01d845894d07c461ff123bf0f69504000000c46331782f1ac44175facb460f6f14a9f0440fb32f450fe4167600"}, 0x8, &(0x7f0000000280)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a5377986fc254ec2862883ce7257cd4f7ae2dcfdaef81c581d1b4223e49887ee68e87ed537d5b2e957e1fac165be3eb34c5174f6279277376cbe5d10966df793456b54921f664921e1615264cc762c189704152109b0dff9eb9ca92da732cc5b46ffffff7f025485dc560b67fa9950386e7d44374265b739aa0ef8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c091b75999c66551d206c48cab1b787530de3629da0b37b211578542ae70ac9e8c0dbe754a77abd06ce2420a"], 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) 20:26:39 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x6, 0x0, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086201, &(0x7f0000000280)=0x5) ioctl$VIDIOC_G_JPEGCOMP(r3, 0x808c563d, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}, 0x1}, @in={0x2, 0x0, @empty}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}], 0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r4}) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x5c}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(0x0, 0x1, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r8 = socket$inet6(0xa, 0x80005, 0x0) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r8, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c) r9 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x0, 0x400400) r10 = gettid() syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') accept4$vsock_stream(r9, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @hyper}, 0x10, 0x80000) getgid() ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000240)) writev(r5, &(0x7f0000000080), 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) ioprio_get$pid(0x2, r10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000000000)) tkill(r10, 0x1004000000016) fgetxattr(r5, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x0, 0x0) close(r7) dup2(r9, r6) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0xbba}, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000007c0)={[{0x7, 0x3, 0x0, 0xe2fe, 0xffffffffffffff81, 0x4, 0x4, 0xffffffffffffb1b0, 0x10000, 0x0, 0x6, 0x2}, {0x1, 0x7, 0x8, 0x8, 0x0, 0x0, 0x8, 0xd3, 0x1, 0x0, 0x3f}, {0x10000, 0x3f, 0x2, 0xea7, 0x5, 0x20, 0x4, 0x1, 0x80000001, 0x0, 0x8245, 0x0, 0x2}]}) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) timer_delete(0x0) [ 1186.392065][ T28] audit: type=1804 audit(1590265599.726:1001): pid=19369 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir984313495/syzkaller.4Sv1HN/1031/file0" dev="sda1" ino=16335 res=1 20:26:39 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0xe6, 0x0) [ 1186.484673][T19375] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 20:26:39 executing program 5: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x82) sendfile(r1, r0, 0x0, 0xa198) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x51) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000001580)=ANY=[], 0x119) sendfile(r3, r2, 0x0, 0xa198) [ 1186.629410][T19357] IPVS: ftp: loaded support on port[0] = 21 [ 1186.658434][T19375] device macsec1 entered promiscuous mode [ 1186.700682][T19375] device virt_wifi0 entered promiscuous mode [ 1186.781129][T19375] device virt_wifi0 left promiscuous mode 20:26:40 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0xe7, 0x0) [ 1187.258098][T19356] lo speed is unknown, defaulting to 1000 20:26:40 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0xe8, 0x0) 20:26:40 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x6, 0x0, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086201, &(0x7f0000000280)=0x5) ioctl$VIDIOC_G_JPEGCOMP(r3, 0x808c563d, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}, 0x1}, @in={0x2, 0x0, @empty}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}], 0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r4}) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x5c}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(0x0, 0x1, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r8 = socket$inet6(0xa, 0x80005, 0x0) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r8, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c) r9 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x0, 0x400400) r10 = gettid() syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') accept4$vsock_stream(r9, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @hyper}, 0x10, 0x80000) getgid() ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000240)) writev(r5, &(0x7f0000000080), 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) ioprio_get$pid(0x2, r10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000000000)) tkill(r10, 0x1004000000016) fgetxattr(r5, &(0x7f0000000840)=ANY=[@ANYBLOB="a50500714f7f7100d340200007d2644a6dc2ebdbd5db1f0867e0c40e01380ec99c6dcf2b0bef2533fdea38cd4ecd9f1d377a4a4aff9ec836959ff1a0191bd4bad0b8fe12bb4d78471a2f990c3776675c0dcdab4b39f584bca23a7a2fc19b27bc9b71e8ae59f42a718a3dec8d4374db63d9d795b0ff05c117aa5702290b3103bc28aec5801bb39ebdd5c3be0000000080000000e59b3dbaf1eb15fced2d000000000000000000000040000000000d2e45dfffb6c050f46226daadc63659168a50dda734148a8fe4d5b99b43e2edb3fe3e754d26bc8c16c313ea9c5bbd35d600702cfce25becac92fde18fa3701cb6b04eb84375191fd8b6ed74e535c990d82524dd5f8997e0930060bda93c57d6a9597a9ba79eb57071b5a49b61ec0fc5fee99c8d4984c400c7fef3cbec8abd2f191c94c41ae90c000000000000cf5406b34abd6f3ae8dc2fea6e5ed50649b862a7f665f095e1fd41b083596db8162f405d241c5bf97c009e6a702ce6408bc1cbd4e0c86692a484a9ad8959fb62f028a0dd925761dc08f1ae0ec4888ac7a64e36bd4093e555efee1780107e0e7039b3d3fc0290f93b7222de47e4a1e9f757ac6c5b9dc9ba4b2ebbc92a6e6c3f27f1b797634d06000000d8836651ba9beb008377323cdd69e464db54236c5663421c20f1142589c9b30fb74b378300000000000000000000f9d7ec43bed2988d5dd4fc8dc9841bfbf39d6968a1e41654fa965fe3e38cabc0e4fd7b1f04c0f69baae5767ece069beaf6dc87c4a0fd11d838c0dac7f5457f7531442cb4e1c48638768969c107039ce237c49bf5ca2862750ea66d48f1f2785cb81ec94a1f57dbbf9608b016decfd66f2d94b381c8ffc593a993d6861deca12cda5faf0ff4cd169ae7c52e2f872e1cc8488f6043c528f40c66c42c754e70dc9817c930f52e2fcf1f7b7c25f77ab96fc06baeec662d46ab333610c123394df2b4a9a57e13ec4dd6115488719f6e8384f25a97ee11e3a44ff524185bd4084146507c2735fdf427dd60220a66ebb5ac78ffe5646cf149a16fe3e5e1cba005ab2954d8c3f8ade1ddf979dd99ae3326b4383ea8cc41dfa1619df8bdbb186849df5891cb4d70000000001c9d85747b4617e35bfad5bbe3003cbfaa3eaa7e68ab928032a1338613f3ddb320f74a9a166d9075b6432401938c33c7f13db04c3599e7ced7b59f5f9f821d06889346b3a982253f3523ece1c9a1517b455206ad6f65aa5aa3f324e9b6d090f2d67e7452c450eceda06fd77a3dd2e085541caa961529f246a2d344b1e9c01b0efb78179a28042c79bc26f71f3766f745ecad7ba420b2556ddcf29d01626288174d54b0ef8cac5e2e33b3fa2c7782a66b2a6ce0a1c668f86d6235782e8b8a5c201e1154ef4f37657e9cc8d616c2bd8d9dba80f7048c93961619459863a05cb640b1b17ed290ec4fd2b190f37a8d63ef3088f5ccd137d66f5cb45d6beddeb4f8f3d4918840d8c0b804e3738b64fd8bbf3fd74b8e8411918ccf495fea0bf1611903da79ad10f2a73299b371"], 0x0, 0x0) close(r7) dup2(r9, r6) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0xbba}, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000007c0)={[{0x7, 0x3, 0x0, 0xe2fe, 0xffffffffffffff81, 0x4, 0x4, 0xffffffffffffb1b0, 0x10000, 0x0, 0x6, 0x2}, {0x1, 0x7, 0x8, 0x8, 0x0, 0x0, 0x8, 0xd3, 0x1, 0x0, 0x3f}, {0x10000, 0x3f, 0x2, 0xea7, 0x5, 0x20, 0x4, 0x1, 0x80000001, 0x0, 0x8245, 0x0, 0x2}]}) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) timer_delete(0x0) 20:26:40 executing program 1: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000180)={&(0x7f0000000100)="7c004e0f7eb6f0ae50030f1c62c166400f3a0fab0a00000004dfc5c4027d3fe566470f113b660f2f785f670f2ba80e0000002599899999", 0x4, &(0x7f0000000140)="f2df590bc46125767452e7875c3051c4e1f810f9c4e2fd1c43c1c1e3ab6546d3c63e42e200c402a947cdc4a2399ae3", {[0x1]}}, &(0x7f0000000240)={&(0x7f00000001c0)="c4a10dd5961d000000c481235c1cb42667f20f12f5f3436f42a4c4017c5aff3c2ac44178511e400f13ae00000000c481fc510b", 0x0, &(0x7f0000000200)="3e410f01d845894d07c461ff123bf0f69504000000c46331782f1ac44175facb460f6f14a9f0440fb32f450fe4167600"}, 0x8, &(0x7f0000000280)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a5377986fc254ec2862883ce7257cd4f7ae2dcfdaef81c581d1b4223e49887ee68e87ed537d5b2e957e1fac165be3eb34c5174f6279277376cbe5d10966df793456b54921f664921e1615264cc762c189704152109b0dff9eb9ca92da732cc5b46ffffff7f025485dc560b67fa9950386e7d44374265b739aa0ef8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c091b75999c66551d206c48cab1b787530de3629da0b37b211578542ae70ac9e8c0dbe754a77abd06ce2420a"], 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) [ 1187.529899][T19428] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 20:26:40 executing program 5: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x82) sendfile(r1, r0, 0x0, 0xa198) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000000)=""/246) faccessat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x1100) r5 = dup2(r4, r4) ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f0000000000)=""/246) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) socket$inet(0x2, 0x4, 0x3) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0xe, &(0x7f0000000080)={r7}, &(0x7f00000000c0)=0xfe42) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000000)={r7, 0x0, 0xfffffe01, 0x5}, &(0x7f0000000080)=0x10) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000001580)=ANY=[], 0x119) sendfile(r3, r2, 0x0, 0xa198) [ 1187.625477][T19428] device macsec1 entered promiscuous mode [ 1187.650315][T19428] device virt_wifi0 entered promiscuous mode [ 1187.699880][T19428] device virt_wifi0 left promiscuous mode 20:26:43 executing program 4: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x82) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r3 = dup2(r2, r2) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000000)=""/246) mq_getsetattr(r3, &(0x7f0000000000)={0x0, 0x8, 0x157400, 0x5}, 0x0) sendfile(r1, r0, 0x0, 0xa198) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r5, r4, 0x0, 0xa198) 20:26:43 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0xe9, 0x0) 20:26:43 executing program 1: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000180)={&(0x7f0000000100)="7c004e0f7eb6f0ae50030f1c62c166400f3a0fab0a00000004dfc5c4027d3fe566470f113b660f2f785f670f2ba80e0000002599899999", 0x4, &(0x7f0000000140)="f2df590bc46125767452e7875c3051c4e1f810f9c4e2fd1c43c1c1e3ab6546d3c63e42e200c402a947cdc4a2399ae3", {[0x1]}}, &(0x7f0000000240)={&(0x7f00000001c0)="c4a10dd5961d000000c481235c1cb42667f20f12f5f3436f42a4c4017c5aff3c2ac44178511e400f13ae00000000c481fc510b", 0x0, &(0x7f0000000200)="3e410f01d845894d07c461ff123bf0f69504000000c46331782f1ac44175facb460f6f14a9f0440fb32f450fe4167600"}, 0x8, &(0x7f0000000280)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a5377986fc254ec2862883ce7257cd4f7ae2dcfdaef81c581d1b4223e49887ee68e87ed537d5b2e957e1fac165be3eb34c5174f6279277376cbe5d10966df793456b54921f664921e1615264cc762c189704152109b0dff9eb9ca92da732cc5b46ffffff7f025485dc560b67fa9950386e7d44374265b739aa0ef8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c091b75999c66551d206c48cab1b787530de3629da0b37b211578542ae70ac9e8c0dbe754a77abd06ce2420a"], 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) 20:26:43 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x6, 0x0, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086201, &(0x7f0000000280)=0x5) ioctl$VIDIOC_G_JPEGCOMP(r3, 0x808c563d, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}, 0x1}, @in={0x2, 0x0, @empty}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}], 0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r4}) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x5c}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(0x0, 0x1, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r8 = socket$inet6(0xa, 0x80005, 0x0) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r8, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c) r9 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x0, 0x400400) r10 = gettid() syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') accept4$vsock_stream(r9, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @hyper}, 0x10, 0x80000) getgid() ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000240)) writev(r5, &(0x7f0000000080), 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) ioprio_get$pid(0x2, r10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000000000)) tkill(r10, 0x1004000000016) fgetxattr(r5, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x0, 0x0) close(r7) dup2(r9, r6) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0xbba}, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000007c0)={[{0x7, 0x3, 0x0, 0xe2fe, 0xffffffffffffff81, 0x4, 0x4, 0xffffffffffffb1b0, 0x10000, 0x0, 0x6, 0x2}, {0x1, 0x7, 0x8, 0x8, 0x0, 0x0, 0x8, 0xd3, 0x1, 0x0, 0x3f}, {0x10000, 0x3f, 0x2, 0xea7, 0x5, 0x20, 0x4, 0x1, 0x80000001, 0x0, 0x8245, 0x0, 0x2}]}) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) timer_delete(0x0) 20:26:43 executing program 5: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x82) sendfile(r1, r0, 0x0, 0xa198) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000008c0)={{{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f00000003c0)=0x9f) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000840)={{0x0, 0x0, r3, r4, r3, 0x0, 0xb}, 0xb8fb, 0xffc, 0x3, 0x8000, 0x0, 0x0, 0x81}) write$FUSE_ATTR(r2, &(0x7f0000000280)={0x78, 0x0, 0x5, {0x401, 0x98, 0x0, {0x1, 0x2, 0x5, 0x2, 0x2, 0x4, 0x2, 0x8, 0x1, 0x800, 0xe4001000, 0x0, r3, 0x1, 0x7}}}, 0x78) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000000000)={0xffff0000, 0x7, 0x5}) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10) connect$inet(r6, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) sendmmsg(r6, &(0x7f0000000080), 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000140)=ANY=[@ANYRESOCT=r6, @ANYRES16], 0x119) sendfile(r5, r2, 0x0, 0xa198) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000200)={0x0, 0x1ff, 0x3, [0x8001, 0xf356, 0x96a]}, &(0x7f0000000240)=0xe) [ 1189.979214][T19484] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 1190.076646][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 1190.076666][ T28] audit: type=1804 audit(1590265603.406:1014): pid=19493 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir984313495/syzkaller.4Sv1HN/1034/file0" dev="sda1" ino=16187 res=1 [ 1190.189673][T19484] device macsec1 entered promiscuous mode [ 1190.207299][T19484] device virt_wifi0 entered promiscuous mode [ 1190.265306][T19484] device virt_wifi0 left promiscuous mode [ 1190.323375][ T28] audit: type=1804 audit(1590265603.416:1015): pid=19493 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir984313495/syzkaller.4Sv1HN/1034/file0" dev="sda1" ino=16187 res=1 20:26:43 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0xea, 0x0) [ 1190.492646][ T28] audit: type=1804 audit(1590265603.486:1016): pid=19498 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir374862090/syzkaller.5NWs5l/1141/file0" dev="sda1" ino=16186 res=1 [ 1190.769488][ T28] audit: type=1804 audit(1590265603.496:1017): pid=19498 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir374862090/syzkaller.5NWs5l/1141/file0" dev="sda1" ino=16186 res=1 [ 1190.808451][ T28] audit: type=1804 audit(1590265604.136:1018): pid=19509 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir984313495/syzkaller.4Sv1HN/1034/file0" dev="sda1" ino=16187 res=1 [ 1190.877076][ T28] audit: type=1804 audit(1590265604.186:1019): pid=19513 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir374862090/syzkaller.5NWs5l/1141/file0" dev="sda1" ino=16186 res=1 [ 1190.902460][ T28] audit: type=1804 audit(1590265604.186:1020): pid=19498 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir374862090/syzkaller.5NWs5l/1141/file0" dev="sda1" ino=16186 res=1 20:26:44 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x6, 0x0, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086201, &(0x7f0000000280)=0x5) ioctl$VIDIOC_G_JPEGCOMP(r3, 0x808c563d, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}, 0x1}, @in={0x2, 0x0, @empty}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}], 0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r4}) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x5c}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(0x0, 0x1, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r8 = socket$inet6(0xa, 0x80005, 0x0) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r8, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c) r9 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x0, 0x400400) r10 = gettid() syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') accept4$vsock_stream(r9, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @hyper}, 0x10, 0x80000) getgid() ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000240)) writev(r5, &(0x7f0000000080), 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) ioprio_get$pid(0x2, r10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000000000)) tkill(r10, 0x1004000000016) fgetxattr(r5, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x0, 0x0) close(r7) dup2(r9, r6) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xbba}, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000007c0)={[{0x7, 0x3, 0x0, 0xe2fe, 0xffffffffffffff81, 0x4, 0x4, 0xffffffffffffb1b0, 0x10000, 0x0, 0x6, 0x2}, {0x1, 0x7, 0x8, 0x8, 0x0, 0x0, 0x8, 0xd3, 0x1, 0x0, 0x3f}, {0x10000, 0x3f, 0x2, 0xea7, 0x5, 0x20, 0x4, 0x1, 0x80000001, 0x0, 0x8245, 0x0, 0x2}]}) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) timer_delete(0x0) [ 1190.929066][ T28] audit: type=1804 audit(1590265604.196:1021): pid=19509 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir984313495/syzkaller.4Sv1HN/1034/file0" dev="sda1" ino=16187 res=1 20:26:44 executing program 1: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000180)={&(0x7f0000000100)="7c004e0f7eb6f0ae50030f1c62c166400f3a0fab0a00000004dfc5c4027d3fe566470f113b660f2f785f670f2ba80e0000002599899999", 0x4, &(0x7f0000000140)="f2df590bc46125767452e7875c3051c4e1f810f9c4e2fd1c43c1c1e3ab6546d3c63e42e200c402a947cdc4a2399ae3", {[0x1]}}, &(0x7f0000000240)={&(0x7f00000001c0)="c4a10dd5961d000000c481235c1cb42667f20f12f5f3436f42a4c4017c5aff3c2ac44178511e400f13ae00000000c481fc510b", 0x0, &(0x7f0000000200)="3e410f01d845894d07c461ff123bf0f69504000000c46331782f1ac44175facb460f6f14a9f0440fb32f450fe4167600"}, 0x8, &(0x7f0000000280)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a5377986fc254ec2862883ce7257cd4f7ae2dcfdaef81c581d1b4223e49887ee68e87ed537d5b2e957e1fac165be3eb34c5174f6279277376cbe5d10966df793456b54921f664921e1615264cc762c189704152109b0dff9eb9ca92da732cc5b46ffffff7f025485dc560b67fa9950386e7d44374265b739aa0ef8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c091b75999c66551d206c48cab1b787530de3629da0b37b211578542ae70ac9e8c0dbe754a77abd06ce2420a"], 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) 20:26:44 executing program 5: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x82) sendfile(r1, r0, 0x0, 0xa198) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000001580)=ANY=[], 0x119) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r5 = dup2(r4, r4) ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r5, 0x80045300, &(0x7f0000000000)) sendfile(r3, r2, 0x0, 0xa198) [ 1191.047281][T19526] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 20:26:44 executing program 4: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x3430c2, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x82) getsockopt$sock_int(r0, 0x1, 0x4, &(0x7f0000000140), &(0x7f0000000180)=0x4) lsetxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.ima\x00', &(0x7f0000000100)=@md5={0x1, "fe126719ba0147a2c7c68e092a6d744a"}, 0x11, 0x3) sendfile(r1, r0, 0x0, 0xa198) lsetxattr$trusted_overlay_opaque(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240)='trusted.overlay.opaque\x00', &(0x7f0000000280)='y\x00', 0x2, 0x2) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r3, r2, 0x0, 0xa198) [ 1191.125466][T19526] device macsec1 entered promiscuous mode [ 1191.144586][T19526] device virt_wifi0 entered promiscuous mode 20:26:44 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0xeb, 0x0) [ 1191.228920][T19526] device virt_wifi0 left promiscuous mode [ 1191.284652][ T28] audit: type=1804 audit(1590265604.616:1022): pid=19537 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir374862090/syzkaller.5NWs5l/1142/file0" dev="sda1" ino=16191 res=1 [ 1191.363627][ T28] audit: type=1804 audit(1590265604.646:1023): pid=19537 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir374862090/syzkaller.5NWs5l/1142/file0" dev="sda1" ino=16191 res=1 20:26:44 executing program 4: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x82) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000000)=0xffffffff80000000) sendfile(r1, r0, 0x0, 0xa198) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r3, r2, 0x0, 0xa198) 20:26:45 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0xec, 0x0) 20:26:45 executing program 2: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0xa81, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r5 = dup2(r4, r4) ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f0000000300)={r6, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) statfs(&(0x7f00000001c0)='./file0\x00', 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x2) socket$inet6(0xa, 0x2, 0x0) 20:26:45 executing program 1: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000180)={&(0x7f0000000100)="7c004e0f7eb6f0ae50030f1c62c166400f3a0fab0a00000004dfc5c4027d3fe566470f113b660f2f785f670f2ba80e0000002599899999", 0x4, &(0x7f0000000140)="f2df590bc46125767452e7875c3051c4e1f810f9c4e2fd1c43c1c1e3ab6546d3c63e42e200c402a947cdc4a2399ae3", {[0x1]}}, &(0x7f0000000240)={&(0x7f00000001c0)="c4a10dd5961d000000c481235c1cb42667f20f12f5f3436f42a4c4017c5aff3c2ac44178511e400f13ae00000000c481fc510b", 0x0, &(0x7f0000000200)="3e410f01d845894d07c461ff123bf0f69504000000c46331782f1ac44175facb460f6f14a9f0440fb32f450fe4167600"}, 0x8, &(0x7f0000000280)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a5377986fc254ec2862883ce7257cd4f7ae2dcfdaef81c581d1b4223e49887ee68e87ed537d5b2e957e1fac165be3eb34c5174f6279277376cbe5d10966df793456b54921f664921e1615264cc762c189704152109b0dff9eb9ca92da732cc5b46ffffff7f025485dc560b67fa9950386e7d44374265b739aa0ef8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c091b75999c66551d206c48cab1b787530de3629da0b37b211578542ae70ac9e8c0dbe754a77abd06ce2420a"], 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) [ 1192.109582][T19570] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 1192.198162][T19570] device macsec1 entered promiscuous mode [ 1192.231340][T19570] device virt_wifi0 entered promiscuous mode 20:26:45 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x6, 0x0, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086201, &(0x7f0000000280)=0x5) ioctl$VIDIOC_G_JPEGCOMP(r3, 0x808c563d, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}, 0x1}, @in={0x2, 0x0, @empty}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}], 0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r4}) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x5c}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(0x0, 0x1, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r8 = socket$inet6(0xa, 0x80005, 0x0) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r8, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c) r9 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x0, 0x400400) r10 = gettid() syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') accept4$vsock_stream(r9, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @hyper}, 0x10, 0x80000) getgid() ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000240)) writev(r5, &(0x7f0000000080), 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) ioprio_get$pid(0x2, r10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000000000)) tkill(r10, 0x1004000000016) fgetxattr(r5, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x0, 0x0) close(r7) dup2(r9, r6) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xbba}, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000007c0)={[{0x7, 0x3, 0x0, 0xe2fe, 0xffffffffffffff81, 0x4, 0x4, 0xffffffffffffb1b0, 0x10000, 0x0, 0x6, 0x2}, {0x1, 0x7, 0x8, 0x8, 0x0, 0x0, 0x8, 0xd3, 0x1, 0x0, 0x3f}, {0x10000, 0x3f, 0x2, 0xea7, 0x5, 0x20, 0x4, 0x1, 0x80000001, 0x0, 0x8245, 0x0, 0x2}]}) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) timer_delete(0x0) 20:26:45 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0xed, 0x0) [ 1192.305775][T19570] device virt_wifi0 left promiscuous mode 20:26:45 executing program 4: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x82) sendfile(r1, r0, 0x0, 0xa198) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r6 = dup2(r5, r5) ioctl$EVIOCGPROP(r6, 0xc004743e, &(0x7f0000000000)=""/246) accept4$rose(r6, &(0x7f0000000140)=@full={0xb, @remote, @remote, 0x0, [@null, @null, @rose, @default, @netrom, @netrom]}, &(0x7f0000000180)=0x40, 0x0) r7 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r7, r2, 0x0, 0xa198) 20:26:46 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0xee, 0x0) 20:26:46 executing program 5: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x400000000000030, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000140)={{0x2, 0x4e24, @loopback}, {0x6, @dev={[], 0x1c}}, 0x12, {0x2, 0x4e21, @multicast2}, 'syz_tun\x00'}) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x82) sendfile(r1, r0, 0x0, 0xa198) open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000001580)=ANY=[], 0x119) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x400000000000030, 0x0) syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x400000000000030, 0x0) sendfile(r3, r2, 0x0, 0xa197) 20:26:46 executing program 1: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000180)={&(0x7f0000000100)="7c004e0f7eb6f0ae50030f1c62c166400f3a0fab0a00000004dfc5c4027d3fe566470f113b660f2f785f670f2ba80e0000002599899999", 0x4, &(0x7f0000000140)="f2df590bc46125767452e7875c3051c4e1f810f9c4e2fd1c43c1c1e3ab6546d3c63e42e200c402a947cdc4a2399ae3", {[0x1]}}, &(0x7f0000000240)={&(0x7f00000001c0)="c4a10dd5961d000000c481235c1cb42667f20f12f5f3436f42a4c4017c5aff3c2ac44178511e400f13ae00000000c481fc510b", 0x0, &(0x7f0000000200)="3e410f01d845894d07c461ff123bf0f69504000000c46331782f1ac44175facb460f6f14a9f0440fb32f450fe4167600"}, 0x8, &(0x7f0000000280)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a5377986fc254ec2862883ce7257cd4f7ae2dcfdaef81c581d1b4223e49887ee68e87ed537d5b2e957e1fac165be3eb34c5174f6279277376cbe5d10966df793456b54921f664921e1615264cc762c189704152109b0dff9eb9ca92da732cc5b46ffffff7f025485dc560b67fa9950386e7d44374265b739aa0ef8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c091b75999c66551d206c48cab1b787530de3629da0b37b211578542ae70ac9e8c0dbe754a77abd06ce2420a"], 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) 20:26:46 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0xef, 0x0) [ 1192.981316][T19612] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 1193.064688][T19612] device macsec1 entered promiscuous mode [ 1193.115912][T19612] device virt_wifi0 entered promiscuous mode [ 1193.157941][T19612] device virt_wifi0 left promiscuous mode 20:26:46 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x6, 0x0, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086201, &(0x7f0000000280)=0x5) ioctl$VIDIOC_G_JPEGCOMP(r3, 0x808c563d, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}, 0x1}, @in={0x2, 0x0, @empty}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}], 0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r4}) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x5c}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(0x0, 0x1, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r8 = socket$inet6(0xa, 0x80005, 0x0) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r8, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c) r9 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x0, 0x400400) r10 = gettid() syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') accept4$vsock_stream(r9, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @hyper}, 0x10, 0x80000) getgid() ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000240)) writev(r5, &(0x7f0000000080), 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) ioprio_get$pid(0x2, r10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000000000)) tkill(r10, 0x1004000000016) fgetxattr(r5, &(0x7f0000000840)=ANY=[@ANYBLOB="a50500714f7f7100d340200007d2644a6dc2ebdbd5db1f0867e0c40e01380ec99c6dcf2b0bef2533fdea38cd4ecd9f1d377a4a4aff9ec836959ff1a0191bd4bad0b8fe12bb4d78471a2f990c3776675c0dcdab4b39f584bca23a7a2fc19b27bc9b71e8ae59f42a718a3dec8d4374db63d9d795b0ff05c117aa5702290b3103bc28aec5801bb39ebdd5c3be0000000080000000e59b3dbaf1eb15fced2d000000000000000000000040000000000d2e45dfffb6c050f46226daadc63659168a50dda734148a8fe4d5b99b43e2edb3fe3e754d26bc8c16c313ea9c5bbd35d600702cfce25becac92fde18fa3701cb6b04eb84375191fd8b6ed74e535c990d82524dd5f8997e0930060bda93c57d6a9597a9ba79eb57071b5a49b61ec0fc5fee99c8d4984c400c7fef3cbec8abd2f191c94c41ae90c000000000000cf5406b34abd6f3ae8dc2fea6e5ed50649b862a7f665f095e1fd41b083596db8162f405d241c5bf97c009e6a702ce6408bc1cbd4e0c86692a484a9ad8959fb62f028a0dd925761dc08f1ae0ec4888ac7a64e36bd4093e555efee1780107e0e7039b3d3fc0290f93b7222de47e4a1e9f757ac6c5b9dc9ba4b2ebbc92a6e6c3f27f1b797634d06000000d8836651ba9beb008377323cdd69e464db54236c5663421c20f1142589c9b30fb74b378300000000000000000000f9d7ec43bed2988d5dd4fc8dc9841bfbf39d6968a1e41654fa965fe3e38cabc0e4fd7b1f04c0f69baae5767ece069beaf6dc87c4a0fd11d838c0dac7f5457f7531442cb4e1c48638768969c107039ce237c49bf5ca2862750ea66d48f1f2785cb81ec94a1f57dbbf9608b016decfd66f2d94b381c8ffc593a993d6861deca12cda5faf0ff4cd169ae7c52e2f872e1cc8488f6043c528f40c66c42c754e70dc9817c930f52e2fcf1f7b7c25f77ab96fc06baeec662d46ab333610c123394df2b4a9a57e13ec4dd6115488719f6e8384f25a97ee11e3a44ff524185bd4084146507c2735fdf427dd60220a66ebb5ac78ffe5646cf149a16fe3e5e1cba005ab2954d8c3f8ade1ddf979dd99ae3326b4383ea8cc41dfa1619df8bdbb186849df5891cb4d70000000001c9d85747b4617e35bfad5bbe3003cbfaa3eaa7e68ab928032a1338613f3ddb320f74a9a166d9075b6432401938c33c7f13db04c3599e7ced7b59f5f9f821d06889346b3a982253f3523ece1c9a1517b455206ad6f65aa5aa3f324e9b6d090f2d67e7452c450eceda06fd77a3dd2e085541caa961529f246a2d344b1e9c01b0efb78179a28042c79bc26f71f3766f745ecad7ba420b2556ddcf29d01626288174d54b0ef8cac5e2e33b3fa2c7782a66b2a6ce0a1c668f86d6235782e8b8a5c201e1154ef4f37657e9cc8d616c2bd8d9dba80f7048c93961619459863a05cb640b1b17ed290ec4fd2b190f37a8d63ef3088f5ccd137d66f5cb45d6beddeb4f8f3d4918840d8c0b804e3738b64fd8bbf3fd74b8e8411918ccf495fea0bf1611903da79ad10f2a73299b371"], 0x0, 0x0) close(r7) dup2(r9, r6) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xbba}, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000007c0)={[{0x7, 0x3, 0x0, 0xe2fe, 0xffffffffffffff81, 0x4, 0x4, 0xffffffffffffb1b0, 0x10000, 0x0, 0x6, 0x2}, {0x1, 0x7, 0x8, 0x8, 0x0, 0x0, 0x8, 0xd3, 0x1, 0x0, 0x3f}, {0x10000, 0x3f, 0x2, 0xea7, 0x5, 0x20, 0x4, 0x1, 0x80000001, 0x0, 0x8245, 0x0, 0x2}]}) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) timer_delete(0x0) 20:26:46 executing program 2: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='f$=', @ANYRESHEX=r0, @ANYBLOB=',root}ode=0000 000000000000040000,user_id=', @ANYBLOB="1fd8d0c0fb60f2fb095b17f3424c6c72a8742d5fd42285317203411c9f3259b33045e72a80b8d382d9a4867a7d777a8469b5f0ab241ecf603100ab4ea900b5040000000000000072c033b5bd9fb68527e1f362664e723786429df9497b6a64d89c60c51a41bfa2232c0ecd1976fba615cb824967fae793b05b4fd5e3aa2350e5486e7a633dc3efd2278b6da46cc3230b7fca4ff81165e707b7ec12e58427a67d9299bbe808f41f1f561d22727583", @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) statfs(&(0x7f00000001c0)='./file0\x00', 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x2) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup2(r1, r1) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000000040)={0x3, 'bridge_slave_1\x00', {0x8}}) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f00000002c0)) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r7) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000140)={0x7, 0x59c6, {r5}, {r7}, 0x1a84000000000000, 0x1}) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffffff, &(0x7f00000000c0)='./file0/../file0\x00', r7, r8, 0x100) dup3(r3, r0, 0x0) 20:26:46 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0xf0, 0x0) [ 1193.517501][T19631] fuse: Unknown parameter 'f$' 20:26:47 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) r2 = open(&(0x7f0000000140)='./file0\x00', 0x3d30c3, 0x198) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r3, r2, 0x0, 0xa198) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x200000, 0x0) bind$rxrpc(r5, &(0x7f0000000080)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) r6 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10) connect$inet(r7, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x400000000000030, 0x0) fcntl$dupfd(r6, 0x406, r7) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000001580)=ANY=[], 0x119) sendfile(r6, r4, 0x0, 0xa198) [ 1193.834604][T19631] fuse: Unknown parameter 'f$' 20:26:47 executing program 1: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000180)={&(0x7f0000000100)="7c004e0f7eb6f0ae50030f1c62c166400f3a0fab0a00000004dfc5c4027d3fe566470f113b660f2f785f670f2ba80e0000002599899999", 0x4, &(0x7f0000000140)="f2df590bc46125767452e7875c3051c4e1f810f9c4e2fd1c43c1c1e3ab6546d3c63e42e200c402a947cdc4a2399ae3", {[0x1]}}, &(0x7f0000000240)={&(0x7f00000001c0)="c4a10dd5961d000000c481235c1cb42667f20f12f5f3436f42a4c4017c5aff3c2ac44178511e400f13ae00000000c481fc510b", 0x0, &(0x7f0000000200)="3e410f01d845894d07c461ff123bf0f69504000000c46331782f1ac44175facb460f6f14a9f0440fb32f450fe4167600"}, 0x8, &(0x7f0000000280)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYBLOB="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", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a5377986fc254ec2862883ce7257cd4f7ae2dcfdaef81c581d1b4223e49887ee68e87ed537d5b2e957e1fac165be3eb34c5174f6279277376cbe5d10966df793456b54921f664921e1615264cc762c189704152109b0dff9eb9ca92da732cc5b46ffffff7f025485dc560b67fa9950386e7d44374265b739aa0ef8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c091b75999c66551d206c48cab1b787530de3629da0b37b211578542ae70ac9e8c0dbe754a77abd06ce2420a"], 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) [ 1193.930031][T19653] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 1193.943333][T19653] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 20:26:47 executing program 4: open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x5add51c276618a8d) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[], 0x82) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x400000000000030, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000000)=""/246) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f00000002c0)) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000000)={0x2, 0x9, {r3}, {0xee00}, 0x68, 0x7}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x400000000000030, 0x0) sendfile(r0, r4, 0x0, 0x10001) r5 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r6 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r6, r5, 0x0, 0xa198) 20:26:47 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0xf1, 0x0) 20:26:47 executing program 1: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000180)={&(0x7f0000000100)="7c004e0f7eb6f0ae50030f1c62c166400f3a0fab0a00000004dfc5c4027d3fe566470f113b660f2f785f670f2ba80e0000002599899999", 0x4, &(0x7f0000000140)="f2df590bc46125767452e7875c3051c4e1f810f9c4e2fd1c43c1c1e3ab6546d3c63e42e200c402a947cdc4a2399ae3", {[0x1]}}, &(0x7f0000000240)={&(0x7f00000001c0)="c4a10dd5961d000000c481235c1cb42667f20f12f5f3436f42a4c4017c5aff3c2ac44178511e400f13ae00000000c481fc510b", 0x0, &(0x7f0000000200)="3e410f01d845894d07c461ff123bf0f69504000000c46331782f1ac44175facb460f6f14a9f0440fb32f450fe4167600"}, 0x8, &(0x7f0000000280)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYBLOB="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", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a5377986fc254ec2862883ce7257cd4f7ae2dcfdaef81c581d1b4223e49887ee68e87ed537d5b2e957e1fac165be3eb34c5174f6279277376cbe5d10966df793456b54921f664921e1615264cc762c189704152109b0dff9eb9ca92da732cc5b46ffffff7f025485dc560b67fa9950386e7d44374265b739aa0ef8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c091b75999c66551d206c48cab1b787530de3629da0b37b211578542ae70ac9e8c0dbe754a77abd06ce2420a"], 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) [ 1194.170516][T19673] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 1194.179423][T19673] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 20:26:47 executing program 5: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x577701, 0x0) r3 = dup2(r2, r2) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f00000000c0)={0x0, 0x8, 0x4, 0x1000, 0x0, {0x0, 0xea60}, {0x1, 0x10, 0x1, 0x7, 0x2, 0x40, "b2d72b8e"}, 0x2, 0x2, @fd, 0x2c, 0x0, r1}) ioctl$TIOCSRS485(r4, 0x542f, &(0x7f0000000140)={0xae5, 0x4}) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x82) sendfile(r1, r0, 0x0, 0xa198) r5 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r6 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x408802, 0x0) ioctl$HIDIOCGNAME(r7, 0x80404806, &(0x7f0000000080)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000001580)=ANY=[], 0x119) sendfile(r6, r5, 0x0, 0xa198) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x202001, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000400)={r8, &(0x7f0000000200)="22de09d1098bc60d71de57c6e6ea849909e0cae8897639d23a482455fbca43a5c00b00627b0c3913db3c4033485cea669ad971256b87dd80ce9f183a119fa564901f649038a97a3cc357ce3fa92356e6a0e938b03717491b9cb9bbc150589e335a5593ea1af8e1cd739dceb8ab5e059155d150cb3d45453ab4db4c42b9a2a52cc8a912e59cc583dedf4216ae01ecf6820f3b43eec5d55a3bfdc85608f57dc55bd955d3bc95f23fd7534a0d1f8f6baf69d8df49218a1c30ab9f74b0b77b558740885b3a3f300daab84406a605c5bb5bff4b203d2672a142fce0033cf6af", &(0x7f0000000300)=""/211}, 0x20) 20:26:47 executing program 1: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000180)={&(0x7f0000000100)="7c004e0f7eb6f0ae50030f1c62c166400f3a0fab0a00000004dfc5c4027d3fe566470f113b660f2f785f670f2ba80e0000002599899999", 0x4, &(0x7f0000000140)="f2df590bc46125767452e7875c3051c4e1f810f9c4e2fd1c43c1c1e3ab6546d3c63e42e200c402a947cdc4a2399ae3", {[0x1]}}, &(0x7f0000000240)={&(0x7f00000001c0)="c4a10dd5961d000000c481235c1cb42667f20f12f5f3436f42a4c4017c5aff3c2ac44178511e400f13ae00000000c481fc510b", 0x0, &(0x7f0000000200)="3e410f01d845894d07c461ff123bf0f69504000000c46331782f1ac44175facb460f6f14a9f0440fb32f450fe4167600"}, 0x8, &(0x7f0000000280)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a381", @ANYBLOB="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", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a5377986fc254ec2862883ce7257cd4f7ae2dcfdaef81c581d1b4223e49887ee68e87ed537d5b2e957e1fac165be3eb34c5174f6279277376cbe5d10966df793456b54921f664921e1615264cc762c189704152109b0dff9eb9ca92da732cc5b46ffffff7f025485dc560b67fa9950386e7d44374265b739aa0ef8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c091b75999c66551d206c48cab1b787530de3629da0b37b211578542ae70ac9e8c0dbe754a77abd06ce2420a"], 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) 20:26:47 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x6, 0x0, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086201, &(0x7f0000000280)=0x5) ioctl$VIDIOC_G_JPEGCOMP(r3, 0x808c563d, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}, 0x1}, @in={0x2, 0x0, @empty}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}], 0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r4}) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x5c}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(0x0, 0x1, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r8 = socket$inet6(0xa, 0x80005, 0x0) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r8, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c) r9 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x0, 0x400400) r10 = gettid() syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') accept4$vsock_stream(r9, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @hyper}, 0x10, 0x80000) getgid() ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000240)) writev(r5, &(0x7f0000000080), 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) ioprio_get$pid(0x2, r10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000000000)) tkill(r10, 0x1004000000016) fgetxattr(r5, &(0x7f0000000840)=ANY=[@ANYBLOB="a50500714f7f7100d340200007d2644a6dc2ebdbd5db1f0867e0c40e01380ec99c6dcf2b0bef2533fdea38cd4ecd9f1d377a4a4aff9ec836959ff1a0191bd4bad0b8fe12bb4d78471a2f990c3776675c0dcdab4b39f584bca23a7a2fc19b27bc9b71e8ae59f42a718a3dec8d4374db63d9d795b0ff05c117aa5702290b3103bc28aec5801bb39ebdd5c3be0000000080000000e59b3dbaf1eb15fced2d000000000000000000000040000000000d2e45dfffb6c050f46226daadc63659168a50dda734148a8fe4d5b99b43e2edb3fe3e754d26bc8c16c313ea9c5bbd35d600702cfce25becac92fde18fa3701cb6b04eb84375191fd8b6ed74e535c990d82524dd5f8997e0930060bda93c57d6a9597a9ba79eb57071b5a49b61ec0fc5fee99c8d4984c400c7fef3cbec8abd2f191c94c41ae90c000000000000cf5406b34abd6f3ae8dc2fea6e5ed50649b862a7f665f095e1fd41b083596db8162f405d241c5bf97c009e6a702ce6408bc1cbd4e0c86692a484a9ad8959fb62f028a0dd925761dc08f1ae0ec4888ac7a64e36bd4093e555efee1780107e0e7039b3d3fc0290f93b7222de47e4a1e9f757ac6c5b9dc9ba4b2ebbc92a6e6c3f27f1b797634d06000000d8836651ba9beb008377323cdd69e464db54236c5663421c20f1142589c9b30fb74b378300000000000000000000f9d7ec43bed2988d5dd4fc8dc9841bfbf39d6968a1e41654fa965fe3e38cabc0e4fd7b1f04c0f69baae5767ece069beaf6dc87c4a0fd11d838c0dac7f5457f7531442cb4e1c48638768969c107039ce237c49bf5ca2862750ea66d48f1f2785cb81ec94a1f57dbbf9608b016decfd66f2d94b381c8ffc593a993d6861deca12cda5faf0ff4cd169ae7c52e2f872e1cc8488f6043c528f40c66c42c754e70dc9817c930f52e2fcf1f7b7c25f77ab96fc06baeec662d46ab333610c123394df2b4a9a57e13ec4dd6115488719f6e8384f25a97ee11e3a44ff524185bd4084146507c2735fdf427dd60220a66ebb5ac78ffe5646cf149a16fe3e5e1cba005ab2954d8c3f8ade1ddf979dd99ae3326b4383ea8cc41dfa1619df8bdbb186849df5891cb4d70000000001c9d85747b4617e35bfad5bbe3003cbfaa3eaa7e68ab928032a1338613f3ddb320f74a9a166d9075b6432401938c33c7f13db04c3599e7ced7b59f5f9f821d06889346b3a982253f3523ece1c9a1517b455206ad6f65aa5aa3f324e9b6d090f2d67e7452c450eceda06fd77a3dd2e085541caa961529f246a2d344b1e9c01b0efb78179a28042c79bc26f71f3766f745ecad7ba420b2556ddcf29d01626288174d54b0ef8cac5e2e33b3fa2c7782a66b2a6ce0a1c668f86d6235782e8b8a5c201e1154ef4f37657e9cc8d616c2bd8d9dba80f7048c93961619459863a05cb640b1b17ed290ec4fd2b190f37a8d63ef3088f5ccd137d66f5cb45d6beddeb4f8f3d4918840d8c0b804e3738b64fd8bbf3fd74b8e8411918ccf495fea0bf1611903da79ad10f2a73299b371"], 0x0, 0x0) close(r7) dup2(r9, r6) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000007c0)={[{0x7, 0x3, 0x0, 0xe2fe, 0xffffffffffffff81, 0x4, 0x4, 0xffffffffffffb1b0, 0x10000, 0x0, 0x6, 0x2}, {0x1, 0x7, 0x8, 0x8, 0x0, 0x0, 0x8, 0xd3, 0x1, 0x0, 0x3f}, {0x10000, 0x3f, 0x2, 0xea7, 0x5, 0x20, 0x4, 0x1, 0x80000001, 0x0, 0x8245, 0x0, 0x2}]}) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) timer_delete(0x0) [ 1194.342582][T19680] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 20:26:47 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0xf2, 0x0) [ 1194.388730][T19680] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 20:26:47 executing program 2: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d303030003030303030303014303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) statfs(&(0x7f00000001c0)='./file0\x00', 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x2) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\b\x00', @ANYRES16=r5, @ANYBLOB="0500000000000000000001000000040004000500050000000000050006000000000008000300970d0000"], 0x30}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x6c, r5, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x20}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x80}, @SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2d}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4011}, 0xc04a) dup3(r3, r0, 0x0) 20:26:47 executing program 1: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000180)={&(0x7f0000000100)="7c004e0f7eb6f0ae50030f1c62c166400f3a0fab0a00000004dfc5c4027d3fe566470f113b660f2f785f670f2ba80e0000002599899999", 0x4, &(0x7f0000000140)="f2df590bc46125767452e7875c3051c4e1f810f9c4e2fd1c43c1c1e3ab6546d3c63e42e200c402a947cdc4a2399ae3", {[0x1]}}, &(0x7f0000000240)={&(0x7f00000001c0)="c4a10dd5961d000000c481235c1cb42667f20f12f5f3436f42a4c4017c5aff3c2ac44178511e400f13ae00000000c481fc510b", 0x0, &(0x7f0000000200)="3e410f01d845894d07c461ff123bf0f69504000000c46331782f1ac44175facb460f6f14a9f0440fb32f450fe4167600"}, 0x8, &(0x7f0000000280)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a5377986fc254ec2862883ce7257cd4f7ae2dcfdaef81c581d1b4223e49887ee68e87ed537d5b2e957e1fac165be3eb34c5174f6279277376cbe5d10966df793456b54921f664921e1615264cc762c189704152109b0dff9eb9ca92da732cc5b46ffffff7f025485dc560b67fa9950386e7d44374265b739aa0ef8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c091b75999c66551d206c48cab1b787530de3629da0b37b211578542ae70ac9e8c0dbe754a77abd06ce2420a"], 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) 20:26:47 executing program 1: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000180)={&(0x7f0000000100)="7c004e0f7eb6f0ae50030f1c62c166400f3a0fab0a00000004dfc5c4027d3fe566470f113b660f2f785f670f2ba80e0000002599899999", 0x4, &(0x7f0000000140)="f2df590bc46125767452e7875c3051c4e1f810f9c4e2fd1c43c1c1e3ab6546d3c63e42e200c402a947cdc4a2399ae3", {[0x1]}}, &(0x7f0000000240)={&(0x7f00000001c0)="c4a10dd5961d000000c481235c1cb42667f20f12f5f3436f42a4c4017c5aff3c2ac44178511e400f13ae00000000c481fc510b", 0x0, &(0x7f0000000200)="3e410f01d845894d07c461ff123bf0f69504000000c46331782f1ac44175facb460f6f14a9f0440fb32f450fe4167600"}, 0x8, &(0x7f0000000280)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a5377986fc254ec2862883ce7257cd4f7ae2dcfdaef81c581d1b4223e49887ee68e87ed537d5b2e957e1fac165be3eb34c5174f6279277376cbe5d10966df793456b54921f664921e1615264cc762c189704152109b0dff9eb9ca92da732cc5b46ffffff7f025485dc560b67fa9950386e7d44374265b739aa0ef8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c091b75999c66551d206c48cab1b787530de3629da0b37b211578542ae70ac9e8c0dbe754a77abd06ce2420a"], 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) 20:26:48 executing program 1: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000180)={&(0x7f0000000100)="7c004e0f7eb6f0ae50030f1c62c166400f3a0fab0a00000004dfc5c4027d3fe566470f113b660f2f785f670f2ba80e0000002599899999", 0x4, &(0x7f0000000140)="f2df590bc46125767452e7875c3051c4e1f810f9c4e2fd1c43c1c1e3ab6546d3c63e42e200c402a947cdc4a2399ae3", {[0x1]}}, &(0x7f0000000240)={&(0x7f00000001c0)="c4a10dd5961d000000c481235c1cb42667f20f12f5f3436f42a4c4017c5aff3c2ac44178511e400f13ae00000000c481fc510b", 0x0, &(0x7f0000000200)="3e410f01d845894d07c461ff123bf0f69504000000c46331782f1ac44175facb460f6f14a9f0440fb32f450fe4167600"}, 0x8, &(0x7f0000000280)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYRES32=0x0, @ANYBLOB="7fff0002810d00001c0012000b0001006d616373656300e10b00020005000700010000000a000540340000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7cf68a72e18b043723262ef1db55855e9b9c3c4f3d85375cfa53566d1bccb85f7297cb07953a21aa4f222f0b3883bb31e8a8f15e68f55716d40aae2130362bc729067a2c1827fb817eec56022b28d49a32965d048e336c6476967ed3c42524afa00cc95b8b1bd067d02f67da010df77addc64711eb3b771464ded7467a586a825be4a7edbb278663c325af5e83e40a3b1b721b5fd06c0500279efe41749bfb87684800f3b4768d6ebe10ee82f6b2e7f55de781d27c9588c2cc3b1730589391f51ebe1ecba1b7d5ba1cc81386ee9fc11ef8c33b3a79f3f9187c9761c15d000000000000000000000000000000e81c0509f83a199089942b308c3f9e1da97bcaa66b4b31cdd2ef42d2bb7b42726a279c5019f4b408633cfce834beb5a343515af9401a8664936c62df130169b7670895897fb13eec0ff09e2e6311dc077a745b63a8fd0000000000000000000000000000c7ae7ad999ddf278dd38f2582244284cdae195f79b6d18165efd92b6946a0965730fbdbdf0f9a37b4b7fe70fd4c82805a286eba1c588a555a6f66035510a89296ff08d3a09d516182d1224d920f4fef3703549e2dfdfe9cdbf518b9ce90be973ede58d65bb60d88308021fcc32653dd4d5c701fcc5080d9d64c91fbd4e3fdfe37b256473ed39500cc751414400dcafb7be350a6a2dfc7991ede5", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a5377986fc254ec2862883ce7257cd4f7ae2dcfdaef81c581d1b4223e49887ee68e87ed537d5b2e957e1fac165be3eb34c5174f6279277376cbe5d10966df793456b54921f664921e1615264cc762c189704152109b0dff9eb9ca92da732cc5b46ffffff7f025485dc560b67fa9950386e7d44374265b739aa0ef8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c091b75999c66551d206c48cab1b787530de3629da0b37b211578542ae70ac9e8c0dbe754a77abd06ce2420a"], 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) 20:26:48 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0xf3, 0x0) [ 1194.808882][T19700] fuse: Invalid rootmode [ 1194.857426][T19703] fuse: Invalid rootmode 20:26:48 executing program 4: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x82) sendfile(r1, r0, 0x0, 0xa198) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r3, r2, 0x0, 0xa198) getsockopt$inet6_udp_int(r0, 0x11, 0x0, &(0x7f0000000000), &(0x7f0000000080)=0x4) 20:26:48 executing program 1: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000180)={&(0x7f0000000100)="7c004e0f7eb6f0ae50030f1c62c166400f3a0fab0a00000004dfc5c4027d3fe566470f113b660f2f785f670f2ba80e0000002599899999", 0x4, &(0x7f0000000140)="f2df590bc46125767452e7875c3051c4e1f810f9c4e2fd1c43c1c1e3ab6546d3c63e42e200c402a947cdc4a2399ae3", {[0x1]}}, &(0x7f0000000240)={&(0x7f00000001c0)="c4a10dd5961d000000c481235c1cb42667f20f12f5f3436f42a4c4017c5aff3c2ac44178511e400f13ae00000000c481fc510b", 0x0, &(0x7f0000000200)="3e410f01d845894d07c461ff123bf0f69504000000c46331782f1ac44175facb460f6f14a9f0440fb32f450fe4167600"}, 0x8, &(0x7f0000000280)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="7fff0002810d00001c0012000b0001006d616373656300e10b00020005000700010000000a000540340000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7cf68a72e18b043723262ef1db55855e9b9c3c4f3d85375cfa53566d1bccb85f7297cb07953a21aa4f222f0b3883bb31e8a8f15e68f55716d40aae2130362bc729067a2c1827fb817eec56022b28d49a32965d048e336c6476967ed3c42524afa00cc95b8b1bd067d02f67da010df77addc64711eb3b771464ded7467a586a825be4a7edbb278663c325af5e83e40a3b1b721b5fd06c0500279efe41749bfb87684800f3b4768d6ebe10ee82f6b2e7f55de781d27c9588c2cc3b1730589391f51ebe1ecba1b7d5ba1cc81386ee9fc11ef8c33b3a79f3f9187c9761c15d000000000000000000000000000000e81c0509f83a199089942b308c3f9e1da97bcaa66b4b31cdd2ef42d2bb7b42726a279c5019f4b408633cfce834beb5a343515af9401a8664936c62df130169b7670895897fb13eec0ff09e2e6311dc077a745b63a8fd0000000000000000000000000000c7ae7ad999ddf278dd38f2582244284cdae195f79b6d18165efd92b6946a0965730fbdbdf0f9a37b4b7fe70fd4c82805a286eba1c588a555a6f66035510a89296ff08d3a09d516182d1224d920f4fef3703549e2dfdfe9cdbf518b9ce90be973ede58d65bb60d88308021fcc32653dd4d5c701fcc5080d9d64c91fbd4e3fdfe37b256473ed39500cc751414400dcafb7be350a6a2dfc7991ede5", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a5377986fc254ec2862883ce7257cd4f7ae2dcfdaef81c581d1b4223e49887ee68e87ed537d5b2e957e1fac165be3eb34c5174f6279277376cbe5d10966df793456b54921f664921e1615264cc762c189704152109b0dff9eb9ca92da732cc5b46ffffff7f025485dc560b67fa9950386e7d44374265b739aa0ef8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c091b75999c66551d206c48cab1b787530de3629da0b37b211578542ae70ac9e8c0dbe754a77abd06ce2420a"], 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) 20:26:48 executing program 2: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x400000000000030, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000300)=ANY=[]) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) statfs(&(0x7f00000001c0)='./file0\x00', 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x2) r4 = socket$inet6(0xa, 0x2, 0x0) dup3(r4, r0, 0x0) [ 1195.112734][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 1195.112755][ T28] audit: type=1804 audit(1590265608.447:1054): pid=19683 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir984313495/syzkaller.4Sv1HN/1038/file0" dev="sda1" ino=16335 res=1 20:26:48 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0xf4, 0x0) [ 1195.212189][ T28] audit: type=1804 audit(1590265608.447:1055): pid=19710 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir984313495/syzkaller.4Sv1HN/1038/file0" dev="sda1" ino=16335 res=1 20:26:48 executing program 1: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000180)={&(0x7f0000000100)="7c004e0f7eb6f0ae50030f1c62c166400f3a0fab0a00000004dfc5c4027d3fe566470f113b660f2f785f670f2ba80e0000002599899999", 0x4, &(0x7f0000000140)="f2df590bc46125767452e7875c3051c4e1f810f9c4e2fd1c43c1c1e3ab6546d3c63e42e200c402a947cdc4a2399ae3", {[0x1]}}, &(0x7f0000000240)={&(0x7f00000001c0)="c4a10dd5961d000000c481235c1cb42667f20f12f5f3436f42a4c4017c5aff3c2ac44178511e400f13ae00000000c481fc510b", 0x0, &(0x7f0000000200)="3e410f01d845894d07c461ff123bf0f69504000000c46331782f1ac44175facb460f6f14a9f0440fb32f450fe4167600"}, 0x8, &(0x7f0000000280)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a5377986fc254ec2862883ce7257cd4f7ae2dcfdaef81c581d1b4223e49887ee68e87ed537d5b2e957e1fac165be3eb34c5174f6279277376cbe5d10966df793456b54921f664921e1615264cc762c189704152109b0dff9eb9ca92da732cc5b46ffffff7f025485dc560b67fa9950386e7d44374265b739aa0ef8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c091b75999c66551d206c48cab1b787530de3629da0b37b211578542ae70ac9e8c0dbe754a77abd06ce2420a"], 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) [ 1195.358837][ T28] audit: type=1804 audit(1590265608.687:1056): pid=19720 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir374862090/syzkaller.5NWs5l/1146/file0" dev="sda1" ino=15896 res=1 [ 1195.441353][ T28] audit: type=1804 audit(1590265608.717:1057): pid=19720 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir374862090/syzkaller.5NWs5l/1146/file0" dev="sda1" ino=15896 res=1 20:26:48 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x6, 0x0, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086201, &(0x7f0000000280)=0x5) ioctl$VIDIOC_G_JPEGCOMP(r3, 0x808c563d, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}, 0x1}, @in={0x2, 0x0, @empty}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}], 0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r4}) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x5c}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(0x0, 0x1, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r8 = socket$inet6(0xa, 0x80005, 0x0) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r8, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c) r9 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x0, 0x400400) r10 = gettid() syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') accept4$vsock_stream(r9, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @hyper}, 0x10, 0x80000) getgid() ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000240)) writev(r5, &(0x7f0000000080), 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) ioprio_get$pid(0x2, r10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000000000)) tkill(r10, 0x1004000000016) fgetxattr(r5, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x0, 0x0) close(r7) dup2(r9, r6) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000007c0)={[{0x7, 0x3, 0x0, 0xe2fe, 0xffffffffffffff81, 0x4, 0x4, 0xffffffffffffb1b0, 0x10000, 0x0, 0x6, 0x2}, {0x1, 0x7, 0x8, 0x8, 0x0, 0x0, 0x8, 0xd3, 0x1, 0x0, 0x3f}, {0x10000, 0x3f, 0x2, 0xea7, 0x5, 0x20, 0x4, 0x1, 0x80000001, 0x0, 0x8245, 0x0, 0x2}]}) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) timer_delete(0x0) 20:26:48 executing program 5: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x82) sendfile(r1, r0, 0x0, 0xa198) openat$userio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/userio\x00', 0x400081, 0x0) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x400000000000030, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000080)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r4, 0xc0506617, &(0x7f0000000200)={{0x3, 0x0, @descriptor="2d6b86034f9c3b0d"}, 0xa2, [], "48813d915ffc58a1cace8b6f56fc7167efd647c33a97dbee4946ad83eeba7a0953a0e7d21fd1076134cfc42bad46eacbfd5dd33e6d890bb9880e31c0ac37e80c6f204aa9afcd51544a05c9d95099a20c59e17e821e02424b10910886a418d8eb98fa0561d205aaf9355f939ea3cbbd212c38402fc49b008a410db4f1171264a8501970af9f0e7d50927c2e808870f769dc15bc584aeaa6d5ce7daf9bb3773ec24af6"}) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10) connect$inet(r5, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x400000000000030, 0x0) write$binfmt_elf64(r5, &(0x7f0000000380)=ANY=[@ANYBLOB="943e676a64be053c658bfaec248ddfb7bbc16f9435a71dffcff8cd128d194d1dd61c86db090453eb8d2c80db4ac73a47327818e0aabd0d6a95de33956fd89e5a7c28ad7f509052838192cdcc899427a2175fbfc69db4411c114c1b2c3b09028850105d444fe7b15be5b8ec9c68aad89d07f1dec8399832a78a2e15b563161ba3d74dca82fd2d46650bf9330ba8ca47c842197615ec25d80331ca64da236348223d5ae1e13b85305290dfd89546eaa5d8646d4fab19754397f2e4c9160c9b529d61a656ded7ecb35975b85792e04bb87a1337cc5ab5bbcfc4f02eaac6f1e48d64646ee44fa1efc111ea2de46728dc873d1d6fea01516b6cb613b4d7d665e1357c8ff4474f482ef3f327f155798bd1be2ea99818296de6c21db2c7dfa4f9cc2579148eca3af0b6efa5be3193edfe987c39243863cc0a097f8023988014", @ANYRESHEX=r1], 0x119) sendfile(r3, r2, 0x0, 0xa198) ioctl$VFIO_IOMMU_UNMAP_DMA(r3, 0x3b72, &(0x7f0000000000)={0x18, 0x1, 0x3, 0x5}) 20:26:48 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0xf5, 0x0) 20:26:49 executing program 1: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000180)={&(0x7f0000000100)="7c004e0f7eb6f0ae50030f1c62c166400f3a0fab0a00000004dfc5c4027d3fe566470f113b660f2f785f670f2ba80e0000002599899999", 0x4, &(0x7f0000000140)="f2df590bc46125767452e7875c3051c4e1f810f9c4e2fd1c43c1c1e3ab6546d3c63e42e200c402a947cdc4a2399ae3", {[0x1]}}, &(0x7f0000000240)={&(0x7f00000001c0)="c4a10dd5961d000000c481235c1cb42667f20f12f5f3436f42a4c4017c5aff3c2ac44178511e400f13ae00000000c481fc510b", 0x0, &(0x7f0000000200)="3e410f01d845894d07c461ff123bf0f69504000000c46331782f1ac44175facb460f6f14a9f0440fb32f450fe4167600"}, 0x8, &(0x7f0000000280)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="7fff0002810d00001c0012000b0001006d616373656300e10b00020005000700010000000a000540340000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7cf68a72e18b043723262ef1db55855e9b9c3c4f3d85375cfa53566d1bccb85f7297cb07953a21aa4f222f0b3883bb31e8a8f15e68f55716d40aae2130362bc729067a2c1827fb817eec56022b28d49a32965d048e336c6476967ed3c42524afa00cc95b8b1bd067d02f67da010df77addc64711eb3b771464ded7467a586a825be4a7edbb278663c325af5e83e40a3b1b721b5fd06c0500279efe41749bfb87684800f3b4768d6ebe10ee82f6b2e7f55de781d27c9588c2cc3b1730589391f51ebe1ecba1b7d5ba1cc81386ee9fc11ef8c33b3a79f3f9187c9761c15d000000000000000000000000000000e81c0509f83a199089942b308c3f9e1da97bcaa66b4b31cdd2ef42d2bb7b42726a279c5019f4b408633cfce834beb5a343515af9401a8664936c62df130169b7670895897fb13eec0ff09e2e6311dc077a745b63a8fd0000000000000000000000000000c7ae7ad999ddf278dd38f2582244284cdae195f79b6d18165efd92b6946a0965730fbdbdf0f9a37b4b7fe70fd4c82805a286eba1c588a555a6f66035510a89296ff08d3a09d516182d1224d920f4fef3703549e2dfdfe9cdbf518b9ce90be973ede58d65bb60d88308021fcc32653dd4d5c701fcc5080d9d64c91fbd4e3fdfe37b256473ed39500cc751414400dcafb7be350a6a2dfc7991ede5", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a5377986fc254ec2862883ce7257cd4f7ae2dcfdaef81c581d1b4223e49887ee68e87ed537d5b2e957e1fac165be3eb34c5174f6279277376cbe5d10966df793456b54921f664921e1615264cc762c189704152109b0dff9eb9ca92da732cc5b46ffffff7f025485dc560b67fa9950386e7d44374265b739aa0ef8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c091b75999c66551d206c48cab1b787530de3629da0b37b211578542ae70ac9e8c0dbe754a77abd06ce2420a"], 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) [ 1195.781514][ T28] audit: type=1804 audit(1590265609.117:1058): pid=19741 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir984313495/syzkaller.4Sv1HN/1039/file0" dev="sda1" ino=15908 res=1 20:26:49 executing program 1: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000180)={&(0x7f0000000100)="7c004e0f7eb6f0ae50030f1c62c166400f3a0fab0a00000004dfc5c4027d3fe566470f113b660f2f785f670f2ba80e0000002599899999", 0x4, &(0x7f0000000140)="f2df590bc46125767452e7875c3051c4e1f810f9c4e2fd1c43c1c1e3ab6546d3c63e42e200c402a947cdc4a2399ae3", {[0x1]}}, &(0x7f0000000240)={&(0x7f00000001c0)="c4a10dd5961d000000c481235c1cb42667f20f12f5f3436f42a4c4017c5aff3c2ac44178511e400f13ae00000000c481fc510b", 0x0, &(0x7f0000000200)="3e410f01d845894d07c461ff123bf0f69504000000c46331782f1ac44175facb460f6f14a9f0440fb32f450fe4167600"}, 0x8, &(0x7f0000000280)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="50000000100005077474", @ANYRES32=0x0, @ANYBLOB="7fff0002810d00001c0012000b0001006d616373656300e10b00020005000700010000000a000540340000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7cf68a72e18b043723262ef1db55855e9b9c3c4f3d85375cfa53566d1bccb85f7297cb07953a21aa4f222f0b3883bb31e8a8f15e68f55716d40aae2130362bc729067a2c1827fb817eec56022b28d49a32965d048e336c6476967ed3c42524afa00cc95b8b1bd067d02f67da010df77addc64711eb3b771464ded7467a586a825be4a7edbb278663c325af5e83e40a3b1b721b5fd06c0500279efe41749bfb87684800f3b4768d6ebe10ee82f6b2e7f55de781d27c9588c2cc3b1730589391f51ebe1ecba1b7d5ba1cc81386ee9fc11ef8c33b3a79f3f9187c9761c15d000000000000000000000000000000e81c0509f83a199089942b308c3f9e1da97bcaa66b4b31cdd2ef42d2bb7b42726a279c5019f4b408633cfce834beb5a343515af9401a8664936c62df130169b7670895897fb13eec0ff09e2e6311dc077a745b63a8fd0000000000000000000000000000c7ae7ad999ddf278dd38f2582244284cdae195f79b6d18165efd92b6946a0965730fbdbdf0f9a37b4b7fe70fd4c82805a286eba1c588a555a6f66035510a89296ff08d3a09d516182d1224d920f4fef3703549e2dfdfe9cdbf518b9ce90be973ede58d65bb60d88308021fcc32653dd4d5c701fcc5080d9d64c91fbd4e3fdfe37b256473ed39500cc751414400dcafb7be350a6a2dfc7991ede5", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a5377986fc254ec2862883ce7257cd4f7ae2dcfdaef81c581d1b4223e49887ee68e87ed537d5b2e957e1fac165be3eb34c5174f6279277376cbe5d10966df793456b54921f664921e1615264cc762c189704152109b0dff9eb9ca92da732cc5b46ffffff7f025485dc560b67fa9950386e7d44374265b739aa0ef8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c091b75999c66551d206c48cab1b787530de3629da0b37b211578542ae70ac9e8c0dbe754a77abd06ce2420a"], 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) [ 1195.897955][ T28] audit: type=1804 audit(1590265609.147:1059): pid=19741 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir984313495/syzkaller.4Sv1HN/1039/file0" dev="sda1" ino=15908 res=1 20:26:49 executing program 2: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) statfs(&(0x7f00000001c0)='./file0\x00', 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) faccessat(r4, &(0x7f0000000040)='./file0\x00', 0x42, 0x400) umount2(&(0x7f0000000080)='./file0\x00', 0x2) r5 = socket$inet6(0xa, 0x2, 0x0) dup3(r5, r0, 0x0) 20:26:49 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0xf6, 0x0) [ 1196.112153][ T28] audit: type=1804 audit(1590265609.387:1060): pid=19720 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir374862090/syzkaller.5NWs5l/1146/file0" dev="sda1" ino=15896 res=1 [ 1196.172358][T19753] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. 20:26:49 executing program 4: open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[], 0x82) syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x20000000000, 0x100) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x400000000000030, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x400000000000030, 0x0) sendfile(r1, r2, 0x0, 0xa196) r3 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r4, r3, 0x0, 0xa198) 20:26:49 executing program 1: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000180)={&(0x7f0000000100)="7c004e0f7eb6f0ae50030f1c62c166400f3a0fab0a00000004dfc5c4027d3fe566470f113b660f2f785f670f2ba80e0000002599899999", 0x4, &(0x7f0000000140)="f2df590bc46125767452e7875c3051c4e1f810f9c4e2fd1c43c1c1e3ab6546d3c63e42e200c402a947cdc4a2399ae3", {[0x1]}}, &(0x7f0000000240)={&(0x7f00000001c0)="c4a10dd5961d000000c481235c1cb42667f20f12f5f3436f42a4c4017c5aff3c2ac44178511e400f13ae00000000c481fc510b", 0x0, &(0x7f0000000200)="3e410f01d845894d07c461ff123bf0f69504000000c46331782f1ac44175facb460f6f14a9f0440fb32f450fe4167600"}, 0x8, &(0x7f0000000280)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="50000000100005077474", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a5377986fc254ec2862883ce7257cd4f7ae2dcfdaef81c581d1b4223e49887ee68e87ed537d5b2e957e1fac165be3eb34c5174f6279277376cbe5d10966df793456b54921f664921e1615264cc762c189704152109b0dff9eb9ca92da732cc5b46ffffff7f025485dc560b67fa9950386e7d44374265b739aa0ef8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c091b75999c66551d206c48cab1b787530de3629da0b37b211578542ae70ac9e8c0dbe754a77abd06ce2420a"], 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) [ 1196.252865][ T28] audit: type=1804 audit(1590265609.387:1061): pid=19720 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir374862090/syzkaller.5NWs5l/1146/file0" dev="sda1" ino=15896 res=1 20:26:49 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0xf7, 0x0) [ 1196.423822][T19764] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1196.463590][ T28] audit: type=1804 audit(1590265609.687:1062): pid=19759 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir374862090/syzkaller.5NWs5l/1147/file0" dev="sda1" ino=15910 res=1 20:26:49 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x6, 0x0, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086201, &(0x7f0000000280)=0x5) ioctl$VIDIOC_G_JPEGCOMP(r3, 0x808c563d, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}, 0x1}, @in={0x2, 0x0, @empty}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}], 0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r4}) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x5c}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(0x0, 0x1, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r8 = socket$inet6(0xa, 0x80005, 0x0) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r8, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c) r9 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x0, 0x400400) r10 = gettid() syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') accept4$vsock_stream(r9, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @hyper}, 0x10, 0x80000) getgid() ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000240)) writev(r5, &(0x7f0000000080), 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) ioprio_get$pid(0x2, r10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000000000)) tkill(r10, 0x1004000000016) fgetxattr(r5, &(0x7f0000000840)=ANY=[@ANYBLOB="a50500714f7f7100d340200007d2644a6dc2ebdbd5db1f0867e0c40e01380ec99c6dcf2b0bef2533fdea38cd4ecd9f1d377a4a4aff9ec836959ff1a0191bd4bad0b8fe12bb4d78471a2f990c3776675c0dcdab4b39f584bca23a7a2fc19b27bc9b71e8ae59f42a718a3dec8d4374db63d9d795b0ff05c117aa5702290b3103bc28aec5801bb39ebdd5c3be0000000080000000e59b3dbaf1eb15fced2d000000000000000000000040000000000d2e45dfffb6c050f46226daadc63659168a50dda734148a8fe4d5b99b43e2edb3fe3e754d26bc8c16c313ea9c5bbd35d600702cfce25becac92fde18fa3701cb6b04eb84375191fd8b6ed74e535c990d82524dd5f8997e0930060bda93c57d6a9597a9ba79eb57071b5a49b61ec0fc5fee99c8d4984c400c7fef3cbec8abd2f191c94c41ae90c000000000000cf5406b34abd6f3ae8dc2fea6e5ed50649b862a7f665f095e1fd41b083596db8162f405d241c5bf97c009e6a702ce6408bc1cbd4e0c86692a484a9ad8959fb62f028a0dd925761dc08f1ae0ec4888ac7a64e36bd4093e555efee1780107e0e7039b3d3fc0290f93b7222de47e4a1e9f757ac6c5b9dc9ba4b2ebbc92a6e6c3f27f1b797634d06000000d8836651ba9beb008377323cdd69e464db54236c5663421c20f1142589c9b30fb74b378300000000000000000000f9d7ec43bed2988d5dd4fc8dc9841bfbf39d6968a1e41654fa965fe3e38cabc0e4fd7b1f04c0f69baae5767ece069beaf6dc87c4a0fd11d838c0dac7f5457f7531442cb4e1c48638768969c107039ce237c49bf5ca2862750ea66d48f1f2785cb81ec94a1f57dbbf9608b016decfd66f2d94b381c8ffc593a993d6861deca12cda5faf0ff4cd169ae7c52e2f872e1cc8488f6043c528f40c66c42c754e70dc9817c930f52e2fcf1f7b7c25f77ab96fc06baeec662d46ab333610c123394df2b4a9a57e13ec4dd6115488719f6e8384f25a97ee11e3a44ff524185bd4084146507c2735fdf427dd60220a66ebb5ac78ffe5646cf149a16fe3e5e1cba005ab2954d8c3f8ade1ddf979dd99ae3326b4383ea8cc41dfa1619df8bdbb186849df5891cb4d70000000001c9d85747b4617e35bfad5bbe3003cbfaa3eaa7e68ab928032a1338613f3ddb320f74a9a166d9075b6432401938c33c7f13db04c3599e7ced7b59f5f9f821d06889346b3a982253f3523ece1c9a1517b455206ad6f65aa5aa3f324e9b6d090f2d67e7452c450eceda06fd77a3dd2e085541caa961529f246a2d344b1e9c01b0efb78179a28042c79bc26f71f3766f745ecad7ba420b2556ddcf29d01626288174d54b0ef8cac5e2e33b3fa2c7782a66b2a6ce0a1c668f86d6235782e8b8a5c201e1154ef4f37657e9cc8d616c2bd8d9dba80f7048c93961619459863a05cb640b1b17ed290ec4fd2b190f37a8d63ef3088f5ccd137d66f5cb45d6beddeb4f8f3d4918840d8c0b804e3738b64fd8bbf3fd74b8e8411918ccf495fea0bf1611903da79ad10f2a73299b371"], 0x0, 0x0) close(r7) dup2(r9, r6) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000007c0)={[{0x7, 0x3, 0x0, 0xe2fe, 0xffffffffffffff81, 0x4, 0x4, 0xffffffffffffb1b0, 0x10000, 0x0, 0x6, 0x2}, {0x1, 0x7, 0x8, 0x8, 0x0, 0x0, 0x8, 0xd3, 0x1, 0x0, 0x3f}, {0x10000, 0x3f, 0x2, 0xea7, 0x5, 0x20, 0x4, 0x1, 0x80000001, 0x0, 0x8245, 0x0, 0x2}]}) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) timer_delete(0x0) 20:26:49 executing program 4: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x82) sendfile(r1, r0, 0x0, 0xa198) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r5, r2, 0x0, 0xa198) 20:26:49 executing program 1: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000180)={&(0x7f0000000100)="7c004e0f7eb6f0ae50030f1c62c166400f3a0fab0a00000004dfc5c4027d3fe566470f113b660f2f785f670f2ba80e0000002599899999", 0x4, &(0x7f0000000140)="f2df590bc46125767452e7875c3051c4e1f810f9c4e2fd1c43c1c1e3ab6546d3c63e42e200c402a947cdc4a2399ae3", {[0x1]}}, &(0x7f0000000240)={&(0x7f00000001c0)="c4a10dd5961d000000c481235c1cb42667f20f12f5f3436f42a4c4017c5aff3c2ac44178511e400f13ae00000000c481fc510b", 0x0, &(0x7f0000000200)="3e410f01d845894d07c461ff123bf0f69504000000c46331782f1ac44175facb460f6f14a9f0440fb32f450fe4167600"}, 0x8, &(0x7f0000000280)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="50000000100005077474", @ANYRES32=0x0, @ANYBLOB="7fff0002810d00001c0012000b0001006d616373656300e10b00020005000700010000000a000540340000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7cf68a72e18b043723262ef1db55855e9b9c3c4f3d85375cfa53566d1bccb85f7297cb07953a21aa4f222f0b3883bb31e8a8f15e68f55716d40aae2130362bc729067a2c1827fb817eec56022b28d49a32965d048e336c6476967ed3c42524afa00cc95b8b1bd067d02f67da010df77addc64711eb3b771464ded7467a586a825be4a7edbb278663c325af5e83e40a3b1b721b5fd06c0500279efe41749bfb87684800f3b4768d6ebe10ee82f6b2e7f55de781d27c9588c2cc3b1730589391f51ebe1ecba1b7d5ba1cc81386ee9fc11ef8c33b3a79f3f9187c9761c15d000000000000000000000000000000e81c0509f83a199089942b308c3f9e1da97bcaa66b4b31cdd2ef42d2bb7b42726a279c5019f4b408633cfce834beb5a343515af9401a8664936c62df130169b7670895897fb13eec0ff09e2e6311dc077a745b63a8fd0000000000000000000000000000c7ae7ad999ddf278dd38f2582244284cdae195f79b6d18165efd92b6946a0965730fbdbdf0f9a37b4b7fe70fd4c82805a286eba1c588a555a6f66035510a89296ff08d3a09d516182d1224d920f4fef3703549e2dfdfe9cdbf518b9ce90be973ede58d65bb60d88308021fcc32653dd4d5c701fcc5080d9d64c91fbd4e3fdfe37b256473ed39500cc751414400dcafb7be350a6a2dfc7991ede5", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a5377986fc254ec2862883ce7257cd4f7ae2dcfdaef81c581d1b4223e49887ee68e87ed537d5b2e957e1fac165be3eb34c5174f6279277376cbe5d10966df793456b54921f664921e1615264cc762c189704152109b0dff9eb9ca92da732cc5b46ffffff7f025485dc560b67fa9950386e7d44374265b739aa0ef8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c091b75999c66551d206c48cab1b787530de3629da0b37b211578542ae70ac9e8c0dbe754a77abd06ce2420a"], 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) [ 1196.646939][ T28] audit: type=1804 audit(1590265609.687:1063): pid=19759 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir374862090/syzkaller.5NWs5l/1147/file0" dev="sda1" ino=15910 res=1 [ 1196.739464][T19786] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. 20:26:50 executing program 5: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x82) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r3 = dup2(r2, r2) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000000)=""/246) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000380)=0xffffffffffffffce) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000000)=""/246) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0x453, 0x0, 0x70bd2d, 0x25dfdbfe, "f6ae475f2072cca054139ba5bd610fe79d3dbd8fec2f28a71295fe62576b6d700e2e483b910a5a6b0f8b543cc282e5cdf1bbd99cfd34b9fe7e9326d3b01d800f8c3123", ["", "", "", ""]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x4000040) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0xe, &(0x7f0000000080)={r5}, &(0x7f00000000c0)=0xfe42) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000000)={r5, 0x5}, &(0x7f0000000080)=0x8) sendfile(r1, r0, 0x0, 0xa198) r6 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r7 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000001580)=ANY=[], 0x119) sendfile(r7, r6, 0x0, 0xa198) 20:26:50 executing program 1: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000180)={&(0x7f0000000100)="7c004e0f7eb6f0ae50030f1c62c166400f3a0fab0a00000004dfc5c4027d3fe566470f113b660f2f785f670f2ba80e0000002599899999", 0x4, &(0x7f0000000140)="f2df590bc46125767452e7875c3051c4e1f810f9c4e2fd1c43c1c1e3ab6546d3c63e42e200c402a947cdc4a2399ae3", {[0x1]}}, &(0x7f0000000240)={&(0x7f00000001c0)="c4a10dd5961d000000c481235c1cb42667f20f12f5f3436f42a4c4017c5aff3c2ac44178511e400f13ae00000000c481fc510b", 0x0, &(0x7f0000000200)="3e410f01d845894d07c461ff123bf0f69504000000c46331782f1ac44175facb460f6f14a9f0440fb32f450fe4167600"}, 0x8, &(0x7f0000000280)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000050774740000dfdbdf", @ANYRES32=0x0, @ANYBLOB="7fff0002810d00001c0012000b0001006d616373656300e10b00020005000700010000000a000540340000000000000008000a0009d35b587e27a8b0b9cad4a128c1aa7cf68a72e18b043723262ef1db55855e9b9c3c4f3d85375cfa53566d1bccb85f7297cb07953a21aa4f222f0b3883bb31e8a8f15e68f55716d40aae2130362bc729067a2c1827fb817eec56022b28d49a32965d048e336c6476967ed3c42524afa00cc95b8b1bd067d02f67da010df77addc64711eb3b771464ded7467a586a825be4a7edbb278663c325af5e83e40a3b1b721b5fd06c0500279efe41749bfb87684800f3b4768d6ebe10ee82f6b2e7f55de781d27c9588c2cc3b1730589391f51ebe1ecba1b7d5ba1cc81386ee9fc11ef8c33b3a79f3f9187c9761c15d000000000000000000000000000000e81c0509f83a199089942b308c3f9e1da97bcaa66b4b31cdd2ef42d2bb7b42726a279c5019f4b408633cfce834beb5a343515af9401a8664936c62df130169b7670895897fb13eec0ff09e2e6311dc077a745b63a8fd0000000000000000000000000000c7ae7ad999ddf278dd38f2582244284cdae195f79b6d18165efd92b6946a0965730fbdbdf0f9a37b4b7fe70fd4c82805a286eba1c588a555a6f66035510a89296ff08d3a09d516182d1224d920f4fef3703549e2dfdfe9cdbf518b9ce90be973ede58d65bb60d88308021fcc32653dd4d5c701fcc5080d9d64c91fbd4e3fdfe37b256473ed39500cc751414400dcafb7be350a6a2dfc7991ede5", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a5377986fc254ec2862883ce7257cd4f7ae2dcfdaef81c581d1b4223e49887ee68e87ed537d5b2e957e1fac165be3eb34c5174f6279277376cbe5d10966df793456b54921f664921e1615264cc762c189704152109b0dff9eb9ca92da732cc5b46ffffff7f025485dc560b67fa9950386e7d44374265b739aa0ef8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c091b75999c66551d206c48cab1b787530de3629da0b37b211578542ae70ac9e8c0dbe754a77abd06ce2420a"], 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) 20:26:50 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0xf8, 0x0) [ 1196.955224][T19797] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. 20:26:50 executing program 2: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r2 = dup2(r1, r1) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000000)=""/246) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r4 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'virt_wifi0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="243d9dd9", @ANYRES16=r3, @ANYBLOB="110000000000000000000200000008000300", @ANYRES32=r5, @ANYBLOB="08002301000014e2"], 0x24}}, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x4c, r3, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0xfff}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x5}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x40, 0xfc}}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xb7}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x4}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040090}, 0x14) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) statfs(&(0x7f00000001c0)='./file0\x00', 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x2) r8 = socket$inet6(0xa, 0x2, 0x0) dup3(r8, r0, 0x0) 20:26:50 executing program 1: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000180)={&(0x7f0000000100)="7c004e0f7eb6f0ae50030f1c62c166400f3a0fab0a00000004dfc5c4027d3fe566470f113b660f2f785f670f2ba80e0000002599899999", 0x4, &(0x7f0000000140)="f2df590bc46125767452e7875c3051c4e1f810f9c4e2fd1c43c1c1e3ab6546d3c63e42e200c402a947cdc4a2399ae3", {[0x1]}}, &(0x7f0000000240)={&(0x7f00000001c0)="c4a10dd5961d000000c481235c1cb42667f20f12f5f3436f42a4c4017c5aff3c2ac44178511e400f13ae00000000c481fc510b", 0x0, &(0x7f0000000200)="3e410f01d845894d07c461ff123bf0f69504000000c46331782f1ac44175facb460f6f14a9f0440fb32f450fe4167600"}, 0x8, &(0x7f0000000280)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000050774740000dfdbdf", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a5377986fc254ec2862883ce7257cd4f7ae2dcfdaef81c581d1b4223e49887ee68e87ed537d5b2e957e1fac165be3eb34c5174f6279277376cbe5d10966df793456b54921f664921e1615264cc762c189704152109b0dff9eb9ca92da732cc5b46ffffff7f025485dc560b67fa9950386e7d44374265b739aa0ef8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c091b75999c66551d206c48cab1b787530de3629da0b37b211578542ae70ac9e8c0dbe754a77abd06ce2420a"], 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) [ 1197.215078][T19807] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. 20:26:50 executing program 1: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000180)={&(0x7f0000000100)="7c004e0f7eb6f0ae50030f1c62c166400f3a0fab0a00000004dfc5c4027d3fe566470f113b660f2f785f670f2ba80e0000002599899999", 0x4, &(0x7f0000000140)="f2df590bc46125767452e7875c3051c4e1f810f9c4e2fd1c43c1c1e3ab6546d3c63e42e200c402a947cdc4a2399ae3", {[0x1]}}, &(0x7f0000000240)={&(0x7f00000001c0)="c4a10dd5961d000000c481235c1cb42667f20f12f5f3436f42a4c4017c5aff3c2ac44178511e400f13ae00000000c481fc510b", 0x0, &(0x7f0000000200)="3e410f01d845894d07c461ff123bf0f69504000000c46331782f1ac44175facb460f6f14a9f0440fb32f450fe4167600"}, 0x8, &(0x7f0000000280)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000050774740000dfdbdf", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a5377986fc254ec2862883ce7257cd4f7ae2dcfdaef81c581d1b4223e49887ee68e87ed537d5b2e957e1fac165be3eb34c5174f6279277376cbe5d10966df793456b54921f664921e1615264cc762c189704152109b0dff9eb9ca92da732cc5b46ffffff7f025485dc560b67fa9950386e7d44374265b739aa0ef8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c091b75999c66551d206c48cab1b787530de3629da0b37b211578542ae70ac9e8c0dbe754a77abd06ce2420a"], 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) 20:26:50 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0xf9, 0x0) [ 1197.399617][T19815] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. 20:26:50 executing program 1: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000180)={&(0x7f0000000100)="7c004e0f7eb6f0ae50030f1c62c166400f3a0fab0a00000004dfc5c4027d3fe566470f113b660f2f785f670f2ba80e0000002599899999", 0x4, &(0x7f0000000140)="f2df590bc46125767452e7875c3051c4e1f810f9c4e2fd1c43c1c1e3ab6546d3c63e42e200c402a947cdc4a2399ae3", {[0x1]}}, &(0x7f0000000240)={&(0x7f00000001c0)="c4a10dd5961d000000c481235c1cb42667f20f12f5f3436f42a4c4017c5aff3c2ac44178511e400f13ae00000000c481fc510b", 0x0, &(0x7f0000000200)="3e410f01d845894d07c461ff123bf0f69504000000c46331782f1ac44175facb460f6f14a9f0440fb32f450fe4167600"}, 0x8, &(0x7f0000000280)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a5377986fc254ec2862883ce7257cd4f7ae2dcfdaef81c581d1b4223e49887ee68e87ed537d5b2e957e1fac165be3eb34c5174f6279277376cbe5d10966df793456b54921f664921e1615264cc762c189704152109b0dff9eb9ca92da732cc5b46ffffff7f025485dc560b67fa9950386e7d44374265b739aa0ef8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c091b75999c66551d206c48cab1b787530de3629da0b37b211578542ae70ac9e8c0dbe754a77abd06ce2420a"], 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) [ 1197.643012][T19831] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 20:26:51 executing program 1: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000180)={&(0x7f0000000100)="7c004e0f7eb6f0ae50030f1c62c166400f3a0fab0a00000004dfc5c4027d3fe566470f113b660f2f785f670f2ba80e0000002599899999", 0x4, &(0x7f0000000140)="f2df590bc46125767452e7875c3051c4e1f810f9c4e2fd1c43c1c1e3ab6546d3c63e42e200c402a947cdc4a2399ae3", {[0x1]}}, &(0x7f0000000240)={&(0x7f00000001c0)="c4a10dd5961d000000c481235c1cb42667f20f12f5f3436f42a4c4017c5aff3c2ac44178511e400f13ae00000000c481fc510b", 0x0, &(0x7f0000000200)="3e410f01d845894d07c461ff123bf0f69504000000c46331782f1ac44175facb460f6f14a9f0440fb32f450fe4167600"}, 0x8, &(0x7f0000000280)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a5377986fc254ec2862883ce7257cd4f7ae2dcfdaef81c581d1b4223e49887ee68e87ed537d5b2e957e1fac165be3eb34c5174f6279277376cbe5d10966df793456b54921f664921e1615264cc762c189704152109b0dff9eb9ca92da732cc5b46ffffff7f025485dc560b67fa9950386e7d44374265b739aa0ef8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c091b75999c66551d206c48cab1b787530de3629da0b37b211578542ae70ac9e8c0dbe754a77abd06ce2420a"], 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) 20:26:51 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x6, 0x0, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086201, &(0x7f0000000280)=0x5) ioctl$VIDIOC_G_JPEGCOMP(r3, 0x808c563d, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}, 0x1}, @in={0x2, 0x0, @empty}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}], 0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r4}) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x5c}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(0x0, 0x1, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r8 = socket$inet6(0xa, 0x80005, 0x0) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r8, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c) r9 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x0, 0x400400) r10 = gettid() syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') accept4$vsock_stream(r9, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @hyper}, 0x10, 0x80000) getgid() ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000240)) writev(r5, &(0x7f0000000080), 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) ioprio_get$pid(0x2, r10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000000000)) tkill(r10, 0x1004000000016) fgetxattr(r5, &(0x7f0000000840)=ANY=[@ANYBLOB="a50500714f7f7100d340200007d2644a6dc2ebdbd5db1f0867e0c40e01380ec99c6dcf2b0bef2533fdea38cd4ecd9f1d377a4a4aff9ec836959ff1a0191bd4bad0b8fe12bb4d78471a2f990c3776675c0dcdab4b39f584bca23a7a2fc19b27bc9b71e8ae59f42a718a3dec8d4374db63d9d795b0ff05c117aa5702290b3103bc28aec5801bb39ebdd5c3be0000000080000000e59b3dbaf1eb15fced2d000000000000000000000040000000000d2e45dfffb6c050f46226daadc63659168a50dda734148a8fe4d5b99b43e2edb3fe3e754d26bc8c16c313ea9c5bbd35d600702cfce25becac92fde18fa3701cb6b04eb84375191fd8b6ed74e535c990d82524dd5f8997e0930060bda93c57d6a9597a9ba79eb57071b5a49b61ec0fc5fee99c8d4984c400c7fef3cbec8abd2f191c94c41ae90c000000000000cf5406b34abd6f3ae8dc2fea6e5ed50649b862a7f665f095e1fd41b083596db8162f405d241c5bf97c009e6a702ce6408bc1cbd4e0c86692a484a9ad8959fb62f028a0dd925761dc08f1ae0ec4888ac7a64e36bd4093e555efee1780107e0e7039b3d3fc0290f93b7222de47e4a1e9f757ac6c5b9dc9ba4b2ebbc92a6e6c3f27f1b797634d06000000d8836651ba9beb008377323cdd69e464db54236c5663421c20f1142589c9b30fb74b378300000000000000000000f9d7ec43bed2988d5dd4fc8dc9841bfbf39d6968a1e41654fa965fe3e38cabc0e4fd7b1f04c0f69baae5767ece069beaf6dc87c4a0fd11d838c0dac7f5457f7531442cb4e1c48638768969c107039ce237c49bf5ca2862750ea66d48f1f2785cb81ec94a1f57dbbf9608b016decfd66f2d94b381c8ffc593a993d6861deca12cda5faf0ff4cd169ae7c52e2f872e1cc8488f6043c528f40c66c42c754e70dc9817c930f52e2fcf1f7b7c25f77ab96fc06baeec662d46ab333610c123394df2b4a9a57e13ec4dd6115488719f6e8384f25a97ee11e3a44ff524185bd4084146507c2735fdf427dd60220a66ebb5ac78ffe5646cf149a16fe3e5e1cba005ab2954d8c3f8ade1ddf979dd99ae3326b4383ea8cc41dfa1619df8bdbb186849df5891cb4d70000000001c9d85747b4617e35bfad5bbe3003cbfaa3eaa7e68ab928032a1338613f3ddb320f74a9a166d9075b6432401938c33c7f13db04c3599e7ced7b59f5f9f821d06889346b3a982253f3523ece1c9a1517b455206ad6f65aa5aa3f324e9b6d090f2d67e7452c450eceda06fd77a3dd2e085541caa961529f246a2d344b1e9c01b0efb78179a28042c79bc26f71f3766f745ecad7ba420b2556ddcf29d01626288174d54b0ef8cac5e2e33b3fa2c7782a66b2a6ce0a1c668f86d6235782e8b8a5c201e1154ef4f37657e9cc8d616c2bd8d9dba80f7048c93961619459863a05cb640b1b17ed290ec4fd2b190f37a8d63ef3088f5ccd137d66f5cb45d6beddeb4f8f3d4918840d8c0b804e3738b64fd8bbf3fd74b8e8411918ccf495fea0bf1611903da79ad10f2a73299b371"], 0x0, 0x0) close(r7) dup2(r9, r6) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0xbba}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000007c0)={[{0x7, 0x3, 0x0, 0xe2fe, 0xffffffffffffff81, 0x4, 0x4, 0xffffffffffffb1b0, 0x10000, 0x0, 0x6, 0x2}, {0x1, 0x7, 0x8, 0x8, 0x0, 0x0, 0x8, 0xd3, 0x1, 0x0, 0x3f}, {0x10000, 0x3f, 0x2, 0xea7, 0x5, 0x20, 0x4, 0x1, 0x80000001, 0x0, 0x8245, 0x0, 0x2}]}) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) timer_delete(0x0) 20:26:51 executing program 4: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x82) sendfile(r1, r0, 0x0, 0xa198) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r5 = dup2(r4, r4) ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f0000000000)=""/246) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c06000000000000c91000000000000000000000000000000001c910ff020000000000000000000000000001c91000000000000000000000ffff000000000000fd213c3683ca4d835b9df93e17c2236c62525f3f08a6bc0d54fda3724ba93d600b4d4f6ef2eae56a29cbc664e394ad330ae26a24788c5a7ed7ec9f5be2b0e3bf38e714ca88a403267f423f9a9f746b3d2e3b4c1aafda2a2ecfb930fbdb32db41bd5c"], 0x40) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10) connect$inet(r7, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x400000000000030, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)={r7}) accept4$unix(r8, &(0x7f0000000240)=@abs, &(0x7f00000002c0)=0x6e, 0x80000) dup2(r6, r6) ioctl$PPPIOCSPASS(r6, 0x40107447, &(0x7f0000000180)={0x5, &(0x7f0000000140)=[{0xffff, 0x80, 0x0, 0xa89}, {0x7, 0x8, 0x4c, 0x200}, {0x1000, 0x1, 0x0, 0x6}, {0x4, 0x3f, 0x2, 0x7fff}, {0xbd3, 0x0, 0xd1, 0xa86}]}) sendfile(r3, r2, 0x0, 0xa198) 20:26:51 executing program 5: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x82) sendfile(r1, r0, 0x0, 0xa198) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000001580)=ANY=[], 0x119) sendfile(r3, r2, 0x0, 0xa198) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) r5 = dup2(r4, r4) ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f0000000000)=""/246) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x1407, 0x20, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x60404}, 0x200000c1) 20:26:51 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0xfa, 0x0) 20:26:51 executing program 2: mkdir(&(0x7f0000000240)='./file0\x00', 0x2) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) statfs(&(0x7f00000001c0)='./file0\x00', 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x2) r3 = socket$inet6(0xa, 0x2, 0x0) dup3(r3, r0, 0x0) 20:26:51 executing program 1: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000180)={&(0x7f0000000100)="7c004e0f7eb6f0ae50030f1c62c166400f3a0fab0a00000004dfc5c4027d3fe566470f113b660f2f785f670f2ba80e0000002599899999", 0x4, &(0x7f0000000140)="f2df590bc46125767452e7875c3051c4e1f810f9c4e2fd1c43c1c1e3ab6546d3c63e42e200c402a947cdc4a2399ae3", {[0x1]}}, &(0x7f0000000240)={&(0x7f00000001c0)="c4a10dd5961d000000c481235c1cb42667f20f12f5f3436f42a4c4017c5aff3c2ac44178511e400f13ae00000000c481fc510b", 0x0, &(0x7f0000000200)="3e410f01d845894d07c461ff123bf0f69504000000c46331782f1ac44175facb460f6f14a9f0440fb32f450fe4167600"}, 0x8, &(0x7f0000000280)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a5377986fc254ec2862883ce7257cd4f7ae2dcfdaef81c581d1b4223e49887ee68e87ed537d5b2e957e1fac165be3eb34c5174f6279277376cbe5d10966df793456b54921f664921e1615264cc762c189704152109b0dff9eb9ca92da732cc5b46ffffff7f025485dc560b67fa9950386e7d44374265b739aa0ef8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c091b75999c66551d206c48cab1b787530de3629da0b37b211578542ae70ac9e8c0dbe754a77abd06ce2420a"], 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) 20:26:51 executing program 1: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000180)={&(0x7f0000000100)="7c004e0f7eb6f0ae50030f1c62c166400f3a0fab0a00000004dfc5c4027d3fe566470f113b660f2f785f670f2ba80e0000002599899999", 0x4, &(0x7f0000000140)="f2df590bc46125767452e7875c3051c4e1f810f9c4e2fd1c43c1c1e3ab6546d3c63e42e200c402a947cdc4a2399ae3", {[0x1]}}, &(0x7f0000000240)={&(0x7f00000001c0)="c4a10dd5961d000000c481235c1cb42667f20f12f5f3436f42a4c4017c5aff3c2ac44178511e400f13ae00000000c481fc510b", 0x0, &(0x7f0000000200)="3e410f01d845894d07c461ff123bf0f69504000000c46331782f1ac44175facb460f6f14a9f0440fb32f450fe4167600"}, 0x8, &(0x7f0000000280)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a3", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a5377986fc254ec2862883ce7257cd4f7ae2dcfdaef81c581d1b4223e49887ee68e87ed537d5b2e957e1fac165be3eb34c5174f6279277376cbe5d10966df793456b54921f664921e1615264cc762c189704152109b0dff9eb9ca92da732cc5b46ffffff7f025485dc560b67fa9950386e7d44374265b739aa0ef8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c091b75999c66551d206c48cab1b787530de3629da0b37b211578542ae70ac9e8c0dbe754a77abd06ce2420a"], 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) 20:26:51 executing program 1: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000180)={&(0x7f0000000100)="7c004e0f7eb6f0ae50030f1c62c166400f3a0fab0a00000004dfc5c4027d3fe566470f113b660f2f785f670f2ba80e0000002599899999", 0x4, &(0x7f0000000140)="f2df590bc46125767452e7875c3051c4e1f810f9c4e2fd1c43c1c1e3ab6546d3c63e42e200c402a947cdc4a2399ae3", {[0x1]}}, &(0x7f0000000240)={&(0x7f00000001c0)="c4a10dd5961d000000c481235c1cb42667f20f12f5f3436f42a4c4017c5aff3c2ac44178511e400f13ae00000000c481fc510b", 0x0, &(0x7f0000000200)="3e410f01d845894d07c461ff123bf0f69504000000c46331782f1ac44175facb460f6f14a9f0440fb32f450fe4167600"}, 0x8, &(0x7f0000000280)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a3", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a5377986fc254ec2862883ce7257cd4f7ae2dcfdaef81c581d1b4223e49887ee68e87ed537d5b2e957e1fac165be3eb34c5174f6279277376cbe5d10966df793456b54921f664921e1615264cc762c189704152109b0dff9eb9ca92da732cc5b46ffffff7f025485dc560b67fa9950386e7d44374265b739aa0ef8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c091b75999c66551d206c48cab1b787530de3629da0b37b211578542ae70ac9e8c0dbe754a77abd06ce2420a"], 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) 20:26:51 executing program 5: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r2 = dup2(r1, r1) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r2, 0x40044104, &(0x7f0000000180)=0x593) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r3, &(0x7f0000000480)=ANY=[], 0x82) sendfile(r3, r0, 0x0, 0xa198) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r6 = dup2(r5, r5) ioctl$EVIOCGPROP(r6, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x6) r7 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b72, &(0x7f0000000140)={0x1, 0x0, 0x10, 0x8, 0x35, &(0x7f0000000200)}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000001580)=ANY=[], 0x119) sendfile(r7, r4, 0x0, 0xa198) 20:26:51 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0xfb, 0x0) 20:26:51 executing program 1: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000180)={&(0x7f0000000100)="7c004e0f7eb6f0ae50030f1c62c166400f3a0fab0a00000004dfc5c4027d3fe566470f113b660f2f785f670f2ba80e0000002599899999", 0x4, &(0x7f0000000140)="f2df590bc46125767452e7875c3051c4e1f810f9c4e2fd1c43c1c1e3ab6546d3c63e42e200c402a947cdc4a2399ae3", {[0x1]}}, &(0x7f0000000240)={&(0x7f00000001c0)="c4a10dd5961d000000c481235c1cb42667f20f12f5f3436f42a4c4017c5aff3c2ac44178511e400f13ae00000000c481fc510b", 0x0, &(0x7f0000000200)="3e410f01d845894d07c461ff123bf0f69504000000c46331782f1ac44175facb460f6f14a9f0440fb32f450fe4167600"}, 0x8, &(0x7f0000000280)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a3", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a5377986fc254ec2862883ce7257cd4f7ae2dcfdaef81c581d1b4223e49887ee68e87ed537d5b2e957e1fac165be3eb34c5174f6279277376cbe5d10966df793456b54921f664921e1615264cc762c189704152109b0dff9eb9ca92da732cc5b46ffffff7f025485dc560b67fa9950386e7d44374265b739aa0ef8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c091b75999c66551d206c48cab1b787530de3629da0b37b211578542ae70ac9e8c0dbe754a77abd06ce2420a"], 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) 20:26:52 executing program 2: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="66643c41d04d71", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6772ef1bcf07637045e72ddfe3fdf857995e1798e4040399e5abe1bd785679acc9cc2c73f4c2bde740881bcf420d58211319009d48fc9bfe29f888d23ae6ef004c6b1e4c9ba9eb3394e6999c993d2a72376437d55c693e957f8b0ba4e3a1181a28c60c69aacfc2bb7fbd14e5ca73bbbfa621cd9593236c65d1dbcb14666efed362c2a788162b9d48b547ad670f46cb24c1ffbfb54006fa848c1ccf8902aa95f88cdc7bbc8528962671f857dcbcfd3656e8ee507bdc210897c775000000000000000576e22f27f8f5ecd4f000e8eb44ac3be3606b61993a63c6ab7391c68d952478e55c755b92a934ed6093f43cff3cc0b3", @ANYRESDEC=0x0]) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) statfs(&(0x7f00000001c0)='./file0\x00', 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x2) r3 = socket$inet6(0xa, 0x2, 0x0) dup3(r3, r0, 0x0) [ 1198.969558][T19908] fuse: Unknown parameter 'fd0xffffffffffffffff}) r2 = dup(r1) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086201, &(0x7f0000000280)=0x5) ioctl$VIDIOC_G_JPEGCOMP(r3, 0x808c563d, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}, 0x1}, @in={0x2, 0x0, @empty}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}], 0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r4}) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x5c}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(0x0, 0x1, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r8 = socket$inet6(0xa, 0x80005, 0x0) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r8, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c) r9 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x0, 0x400400) r10 = gettid() syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') accept4$vsock_stream(r9, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @hyper}, 0x10, 0x80000) getgid() ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000240)) writev(r5, &(0x7f0000000080), 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) ioprio_get$pid(0x2, r10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000000000)) tkill(r10, 0x1004000000016) fgetxattr(r5, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x0, 0x0) close(r7) dup2(r9, r6) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0xbba}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000007c0)={[{0x7, 0x3, 0x0, 0xe2fe, 0xffffffffffffff81, 0x4, 0x4, 0xffffffffffffb1b0, 0x10000, 0x0, 0x6, 0x2}, {0x1, 0x7, 0x8, 0x8, 0x0, 0x0, 0x8, 0xd3, 0x1, 0x0, 0x3f}, {0x10000, 0x3f, 0x2, 0xea7, 0x5, 0x20, 0x4, 0x1, 0x80000001, 0x0, 0x8245, 0x0, 0x2}]}) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) timer_delete(0x0) 20:26:52 executing program 1: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) rt_sigaction(0xc, &(0x7f0000000180)={&(0x7f0000000100)="7c004e0f7eb6f0ae50030f1c62c166400f3a0fab0a00000004dfc5c4027d3fe566470f113b660f2f785f670f2ba80e0000002599899999", 0x4, &(0x7f0000000140)="f2df590bc46125767452e7875c3051c4e1f810f9c4e2fd1c43c1c1e3ab6546d3c63e42e200c402a947cdc4a2399ae3", {[0x1]}}, &(0x7f0000000240)={&(0x7f00000001c0)="c4a10dd5961d000000c481235c1cb42667f20f12f5f3436f42a4c4017c5aff3c2ac44178511e400f13ae00000000c481fc510b", 0x0, &(0x7f0000000200)="3e410f01d845894d07c461ff123bf0f69504000000c46331782f1ac44175facb460f6f14a9f0440fb32f450fe4167600"}, 0x8, &(0x7f0000000280)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000050774740000dfdbdfa65501a3", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="6326ffc30340a59af4c3650421f9a5377986fc254ec2862883ce7257cd4f7ae2dcfdaef81c581d1b4223e49887ee68e87ed537d5b2e957e1fac165be3eb34c5174f6279277376cbe5d10966df793456b54921f664921e1615264cc762c189704152109b0dff9eb9ca92da732cc5b46ffffff7f025485dc560b67fa9950386e7d44374265b739aa0ef8918e45feb997445e598790400e81a0a90106099ffc4061064fb95e437e5d5f0594c091b75999c66551d206c48cab1b787530de3629da0b37b211578542ae70ac9e8c0dbe754a77abd06ce2420a"], 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) 20:26:52 executing program 4: r0 = open(&(0x7f0000000080)='./file0\x00', 0x1c1142, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000200)=ANY=[@ANYRES16=r0, @ANYBLOB="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"], 0x82) sendfile(r1, r0, 0x0, 0xa198) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r3, r2, 0x0, 0xa198) 20:26:52 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0xfc, 0x0) [ 1199.170748][T19914] __nla_validate_parse: 5 callbacks suppressed [ 1199.170780][T19914] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. 20:26:52 executing program 2: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) statfs(&(0x7f00000001c0)='./file0\x00', 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x2) r2 = socket$inet6(0xa, 0x2, 0x0) dup3(r2, r0, 0x0) 20:26:52 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x6, 0x0, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086201, &(0x7f0000000280)=0x5) ioctl$VIDIOC_G_JPEGCOMP(r3, 0x808c563d, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}, 0x1}, @in={0x2, 0x0, @empty}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}], 0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r4}) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x5c}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(0x0, 0x1, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r8 = socket$inet6(0xa, 0x80005, 0x0) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r8, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c) r9 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x0, 0x400400) r10 = gettid() syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') accept4$vsock_stream(r9, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @hyper}, 0x10, 0x80000) getgid() ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000240)) writev(r5, &(0x7f0000000080), 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) ioprio_get$pid(0x2, r10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000000000)) tkill(r10, 0x1004000000016) fgetxattr(r5, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x0, 0x0) close(r7) dup2(r9, r6) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0xbba}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000007c0)={[{0x7, 0x3, 0x0, 0xe2fe, 0xffffffffffffff81, 0x4, 0x4, 0xffffffffffffb1b0, 0x10000, 0x0, 0x6, 0x2}, {0x1, 0x7, 0x8, 0x8, 0x0, 0x0, 0x8, 0xd3, 0x1, 0x0, 0x3f}, {0x10000, 0x3f, 0x2, 0xea7, 0x5, 0x20, 0x4, 0x1, 0x80000001, 0x0, 0x8245, 0x0, 0x2}]}) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) timer_delete(0x0) 20:26:52 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0xfd, 0x0) 20:26:52 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0xfe, 0x0) 20:26:53 executing program 5: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@can_newroute={0x14c, 0x18, 0xe27, 0x70bd26, 0x25dfdbfe, {0x1d, 0x1, 0x4}, [@CGW_CS_CRC8={0x11e, 0x6, {0x10, 0x5a, 0x6d, 0xd3, 0x4, "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", 0x2, "e13a5e209cfe6e3cd34cfe09852cdea08e40cfee"}}, @CGW_MOD_OR={0x15, 0x2, {{{0x1, 0x1, 0x1, 0x1}, 0x2, 0x2, 0x0, 0x0, "59720b725efa5e4d"}, 0x4}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x80}, 0x40480a4) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, &(0x7f0000000080)={{0x0, 0x0, @descriptor="117fc96d7f8176eb"}}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r2, &(0x7f0000000480)=ANY=[], 0x82) sendfile(r2, r0, 0x0, 0xa198) r3 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000001580)=ANY=[], 0x119) sendfile(r4, r3, 0x0, 0xa198) 20:26:53 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0x102, 0x0) 20:26:53 executing program 4: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1c1142, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x82) sendfile(r1, r0, 0x0, 0xa198) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r3, r2, 0x0, 0xa198) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r5 = dup2(r4, r4) ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f0000000000)=""/246) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000000)=[@window, @mss={0x2, 0x6}], 0x2) 20:26:53 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x6, 0x0, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = dup(r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086201, &(0x7f0000000280)=0x5) ioctl$VIDIOC_G_JPEGCOMP(r3, 0x808c563d, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}, 0x1}, @in={0x2, 0x0, @empty}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}], 0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r4}) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x5c}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(0x0, 0x1, 0x81) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r8 = socket$inet6(0xa, 0x80005, 0x0) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r8, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c) r9 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x0, 0x400400) r10 = gettid() syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') accept4$vsock_stream(r9, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @hyper}, 0x10, 0x80000) getgid() ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000240)) writev(r5, &(0x7f0000000080), 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) ioprio_get$pid(0x2, r10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000000000)) tkill(r10, 0x1004000000016) fgetxattr(r5, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x0, 0x0) close(r7) dup2(r9, r6) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0xbba}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000007c0)={[{0x7, 0x3, 0x0, 0xe2fe, 0xffffffffffffff81, 0x4, 0x4, 0xffffffffffffb1b0, 0x10000, 0x0, 0x6, 0x2}, {0x1, 0x7, 0x8, 0x8, 0x0, 0x0, 0x8, 0xd3, 0x1, 0x0, 0x3f}, {0x10000, 0x3f, 0x2, 0xea7, 0x5, 0x20, 0x4, 0x1, 0x80000001, 0x0, 0x8245, 0x0, 0x2}]}) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) timer_delete(0x0) 20:26:53 executing program 3: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) preadv(r0, &(0x7f00000017c0), 0x103, 0x0) [ 1200.329434][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 1200.329455][ T28] audit: type=1804 audit(1590265613.657:1094): pid=19963 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir374862090/syzkaller.5NWs5l/1151/file0" dev="sda1" ino=16366 res=1 [ 1200.393731][T19963] ================================================================== [ 1200.401963][T19963] BUG: KCSAN: data-race in __writeback_single_inode / xas_set_mark [ 1200.409861][T19963] [ 1200.412195][T19963] write to 0xffff888068cf526c of 4 bytes by task 19961 on cpu 0: [ 1200.419916][T19963] xas_set_mark+0x140/0x150 [ 1200.425015][T19963] __xa_set_mark+0xdd/0x110 [ 1200.429498][T19963] __set_page_dirty+0x151/0x270 [ 1200.434326][T19963] mark_buffer_dirty+0x26e/0x2b0 [ 1200.439269][T19963] __block_commit_write.isra.0+0x11d/0x170 [ 1200.445056][T19963] block_write_end+0x6d/0x140 [ 1200.449704][T19963] generic_write_end+0x8c/0x290 [ 1200.454555][T19963] ext4_da_write_end+0x162/0x690 [ 1200.459471][T19963] generic_perform_write+0x1d7/0x320 [ 1200.464732][T19963] ext4_buffered_write_iter+0x14e/0x280 [ 1200.470278][T19963] ext4_file_write_iter+0xf4/0xd30 [ 1200.475393][T19963] do_iter_readv_writev+0x4a7/0x5d0 [ 1200.480592][T19963] do_iter_write+0x137/0x3a0 [ 1200.485184][T19963] vfs_iter_write+0x56/0x80 [ 1200.489691][T19963] iter_file_splice_write+0x530/0x830 [ 1200.495041][T19963] direct_splice_actor+0x97/0xb0 [ 1200.499965][T19963] splice_direct_to_actor+0x22f/0x540 [ 1200.505320][T19963] do_splice_direct+0x152/0x1d0 [ 1200.510173][T19963] do_sendfile+0x380/0x800 [ 1200.514592][T19963] __x64_sys_sendfile64+0x121/0x140 [ 1200.519978][T19963] do_syscall_64+0xc7/0x3b0 [ 1200.524535][T19963] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1200.530418][T19963] [ 1200.532760][T19963] read to 0xffff888068cf526c of 4 bytes by task 19963 on cpu 1: [ 1200.540375][T19963] __writeback_single_inode+0x376/0x910 [ 1200.545907][T19963] writeback_single_inode+0x219/0x2f0 [ 1200.552219][T19963] sync_inode_metadata+0x75/0xa0 [ 1200.557141][T19963] ext4_sync_file+0x47a/0x8b0 [ 1200.561800][T19963] vfs_fsync_range+0x7c/0x150 [ 1200.566459][T19963] ext4_buffered_write_iter+0x211/0x280 [ 1200.571986][T19963] ext4_file_write_iter+0xf4/0xd30 [ 1200.577100][T19963] do_iter_readv_writev+0x4a7/0x5d0 [ 1200.582287][T19963] do_iter_write+0x137/0x3a0 [ 1200.586860][T19963] vfs_iter_write+0x56/0x80 [ 1200.591351][T19963] iter_file_splice_write+0x530/0x830 [ 1200.596733][T19963] direct_splice_actor+0x97/0xb0 [ 1200.601658][T19963] splice_direct_to_actor+0x22f/0x540 [ 1200.607031][T19963] do_splice_direct+0x152/0x1d0 [ 1200.611868][T19963] do_sendfile+0x380/0x800 [ 1200.616613][T19963] __x64_sys_sendfile64+0x121/0x140 [ 1200.621797][T19963] do_syscall_64+0xc7/0x3b0 [ 1200.626283][T19963] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1200.632145][T19963] [ 1200.634452][T19963] Reported by Kernel Concurrency Sanitizer on: [ 1200.640604][T19963] CPU: 1 PID: 19963 Comm: syz-executor.4 Not tainted 5.7.0-rc1-syzkaller #0 [ 1200.649269][T19963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1200.659312][T19963] ================================================================== [ 1200.667363][T19963] Kernel panic - not syncing: panic_on_warn set ... [ 1200.673927][T19963] CPU: 1 PID: 19963 Comm: syz-executor.4 Not tainted 5.7.0-rc1-syzkaller #0 [ 1200.682576][T19963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1200.692642][T19963] Call Trace: [ 1200.695929][T19963] dump_stack+0x11d/0x187 [ 1200.700250][T19963] panic+0x210/0x640 [ 1200.704132][T19963] ? vprintk_func+0x89/0x13a [ 1200.708718][T19963] kcsan_report.cold+0xc/0x1a [ 1200.713385][T19963] kcsan_setup_watchpoint+0x3fb/0x440 [ 1200.718762][T19963] __writeback_single_inode+0x376/0x910 [ 1200.724307][T19963] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1200.730217][T19963] writeback_single_inode+0x219/0x2f0 [ 1200.735585][T19963] sync_inode_metadata+0x75/0xa0 [ 1200.740523][T19963] ext4_sync_file+0x47a/0x8b0 [ 1200.745250][T19963] ? __read_once_size.constprop.0+0x20/0x20 [ 1200.751139][T19963] vfs_fsync_range+0x7c/0x150 [ 1200.755802][T19963] ext4_buffered_write_iter+0x211/0x280 [ 1200.761488][T19963] ext4_file_write_iter+0xf4/0xd30 [ 1200.766595][T19963] ? common_file_perm+0x1d1/0x490 [ 1200.771613][T19963] ? generic_update_time+0x189/0x270 [ 1200.776903][T19963] do_iter_readv_writev+0x4a7/0x5d0 [ 1200.782097][T19963] do_iter_write+0x137/0x3a0 [ 1200.786687][T19963] ? __kmalloc+0x278/0x640 [ 1200.791115][T19963] vfs_iter_write+0x56/0x80 [ 1200.795605][T19963] iter_file_splice_write+0x530/0x830 [ 1200.800976][T19963] ? page_cache_pipe_buf_release+0x190/0x190 [ 1200.806942][T19963] direct_splice_actor+0x97/0xb0 [ 1200.811887][T19963] splice_direct_to_actor+0x22f/0x540 [ 1200.817247][T19963] ? generic_pipe_buf_nosteal+0x20/0x20 [ 1200.822787][T19963] do_splice_direct+0x152/0x1d0 [ 1200.827628][T19963] do_sendfile+0x380/0x800 [ 1200.832034][T19963] __x64_sys_sendfile64+0x121/0x140 [ 1200.837217][T19963] do_syscall_64+0xc7/0x3b0 [ 1200.841711][T19963] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1200.847585][T19963] RIP: 0033:0x45ca29 [ 1200.851471][T19963] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1200.871068][T19963] RSP: 002b:00007fa812e2ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1200.879602][T19963] RAX: ffffffffffffffda RBX: 00000000004fc540 RCX: 000000000045ca29 [ 1200.887694][T19963] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000006 [ 1200.895986][T19963] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1200.903943][T19963] R10: 000000000000a198 R11: 0000000000000246 R12: 00000000ffffffff [ 1200.911908][T19963] R13: 00000000000008dc R14: 00000000004cba16 R15: 00007fa812e2b6d4 [ 1200.921419][T19963] Kernel Offset: disabled [ 1200.925757][T19963] Rebooting in 86400 seconds..