0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900000b0000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:27:46 executing program 2: [ 2118.613086][ T3646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:27:46 executing program 5: 02:27:47 executing program 4: 02:27:47 executing program 1: 02:27:47 executing program 0: 02:27:47 executing program 5: 02:27:47 executing program 2: 02:27:47 executing program 4: [ 2118.918087][ T148] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2118.928827][ T148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:27:47 executing program 0: 02:27:47 executing program 1: 02:27:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900f60c0000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:27:47 executing program 5: 02:27:47 executing program 2: 02:27:47 executing program 4: 02:27:47 executing program 1: 02:27:47 executing program 5: 02:27:47 executing program 0: 02:27:47 executing program 2: 02:27:47 executing program 4: 02:27:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900000e0000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:27:47 executing program 5: 02:27:47 executing program 1: 02:27:47 executing program 0: 02:27:47 executing program 2: 02:27:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[], 0x34}}, 0xc000) 02:27:47 executing program 4: 02:27:47 executing program 1: 02:27:47 executing program 2: 02:27:47 executing program 0: 02:27:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900000f0000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:27:47 executing program 5: 02:27:47 executing program 4: 02:27:47 executing program 1: 02:27:47 executing program 0: 02:27:47 executing program 2: [ 2119.636868][ T3646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:27:48 executing program 5: 02:27:48 executing program 4: 02:27:48 executing program 1: 02:27:48 executing program 0: 02:27:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000120000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:27:48 executing program 2: 02:27:48 executing program 4: 02:27:48 executing program 1: 02:27:48 executing program 5: 02:27:48 executing program 0: 02:27:48 executing program 2: 02:27:48 executing program 1: 02:27:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090001180000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:27:48 executing program 5: 02:27:48 executing program 0: 02:27:48 executing program 4: 02:27:48 executing program 2: 02:27:48 executing program 1: 02:27:48 executing program 5: [ 2120.187702][ T5681] nla_validate_range_unsigned: 24 callbacks suppressed [ 2120.187714][ T5681] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:27:48 executing program 4: 02:27:48 executing program 0: [ 2120.313969][ T5693] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:27:48 executing program 2: 02:27:48 executing program 1: 02:27:48 executing program 4: 02:27:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000200000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:27:48 executing program 5: 02:27:48 executing program 0: 02:27:48 executing program 2: 02:27:48 executing program 1: 02:27:48 executing program 4: 02:27:48 executing program 0: 02:27:48 executing program 5: [ 2120.592729][ T5717] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:27:48 executing program 1: 02:27:48 executing program 2: 02:27:48 executing program 4: [ 2120.698617][ T5731] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2120.698688][ T1216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:27:49 executing program 0: 02:27:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090002220000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:27:49 executing program 5: 02:27:49 executing program 2: 02:27:49 executing program 4: 02:27:49 executing program 1: [ 2120.841452][T22839] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2120.852188][T22839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2120.860770][T15234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:27:49 executing program 2: 02:27:49 executing program 5: 02:27:49 executing program 4: 02:27:49 executing program 0: 02:27:49 executing program 1: 02:27:49 executing program 2: [ 2121.050939][ T5752] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2121.128155][ T5768] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:27:49 executing program 4: 02:27:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900003f0000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:27:49 executing program 5: 02:27:49 executing program 0: 02:27:49 executing program 1: 02:27:49 executing program 2: 02:27:49 executing program 4: 02:27:49 executing program 5: 02:27:49 executing program 0: 02:27:49 executing program 1: 02:27:49 executing program 2: [ 2121.370422][ T5786] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:27:49 executing program 4: 02:27:49 executing program 5: [ 2121.476954][ T5796] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:27:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000400000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:27:49 executing program 0: 02:27:49 executing program 1: 02:27:49 executing program 2: 02:27:49 executing program 4: 02:27:49 executing program 5: 02:27:49 executing program 0: 02:27:49 executing program 1: 02:27:50 executing program 2: 02:27:50 executing program 4: [ 2121.727866][ T3646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2121.745920][ T5821] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:27:50 executing program 5: [ 2121.793555][ T5828] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:27:50 executing program 2: 02:27:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000480000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:27:50 executing program 0: 02:27:50 executing program 1: 02:27:50 executing program 4: 02:27:50 executing program 5: 02:27:50 executing program 2: 02:27:50 executing program 0: 02:27:50 executing program 1: 02:27:50 executing program 4: 02:27:50 executing program 2: 02:27:50 executing program 0: 02:27:50 executing program 5: 02:27:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900004a0000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:27:50 executing program 1: 02:27:50 executing program 4: 02:27:50 executing program 0: 02:27:50 executing program 2: 02:27:50 executing program 5: 02:27:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900004c0000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:27:50 executing program 1: 02:27:50 executing program 0: 02:27:50 executing program 5: 02:27:50 executing program 2: 02:27:50 executing program 4: 02:27:50 executing program 1: 02:27:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900035c0000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:27:51 executing program 0: 02:27:51 executing program 2: 02:27:51 executing program 4: [ 2122.756380][ T3646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2122.756890][ T196] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration 02:27:51 executing program 5: 02:27:51 executing program 1: 02:27:51 executing program 0: 02:27:51 executing program 4: 02:27:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000600000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:27:51 executing program 2: 02:27:51 executing program 0: 02:27:51 executing program 1: 02:27:51 executing program 5: 02:27:51 executing program 4: 02:27:51 executing program 0: 02:27:51 executing program 5: 02:27:51 executing program 1: 02:27:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000680000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:27:51 executing program 2: 02:27:51 executing program 4: 02:27:51 executing program 0: 02:27:51 executing program 5: 02:27:51 executing program 1: 02:27:51 executing program 2: 02:27:51 executing program 4: 02:27:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090003690000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:27:51 executing program 0: 02:27:51 executing program 1: 02:27:51 executing program 5: 02:27:51 executing program 2: 02:27:51 executing program 4: 02:27:51 executing program 0: 02:27:51 executing program 5: 02:27:52 executing program 1: 02:27:52 executing program 4: 02:27:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900006c0000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:27:52 executing program 5: 02:27:52 executing program 2: 02:27:52 executing program 0: [ 2123.797359][ T2630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:27:52 executing program 1: [ 2123.881992][T15234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:27:52 executing program 4: 02:27:52 executing program 5: 02:27:52 executing program 2: 02:27:52 executing program 0: 02:27:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000740000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:27:52 executing program 1: [ 2124.037214][T27517] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration 02:27:52 executing program 4: 02:27:52 executing program 5: 02:27:52 executing program 0: 02:27:52 executing program 2: 02:27:52 executing program 1: 02:27:52 executing program 4: 02:27:52 executing program 0: 02:27:52 executing program 5: 02:27:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900007a0000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:27:52 executing program 2: 02:27:52 executing program 4: 02:27:52 executing program 1: 02:27:52 executing program 5: 02:27:52 executing program 0: 02:27:52 executing program 4: 02:27:52 executing program 2: 02:27:52 executing program 1: 02:27:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090003910000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:27:52 executing program 0: 02:27:52 executing program 5: 02:27:52 executing program 4: 02:27:52 executing program 2: 02:27:52 executing program 1: [ 2124.676822][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2124.687548][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:27:53 executing program 5: 02:27:53 executing program 2: 02:27:53 executing program 4: 02:27:53 executing program 0: 02:27:53 executing program 1: [ 2124.846197][ T3646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:27:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900029e0000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:27:53 executing program 2: 02:27:53 executing program 1: 02:27:53 executing program 4: 02:27:53 executing program 0: 02:27:53 executing program 5: 02:27:53 executing program 1: 02:27:53 executing program 2: 02:27:53 executing program 4: 02:27:53 executing program 1: 02:27:53 executing program 0: 02:27:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090088a00000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:27:53 executing program 5: 02:27:53 executing program 2: [ 2125.288202][ T6225] nla_validate_range_unsigned: 24 callbacks suppressed [ 2125.288214][ T6225] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:27:53 executing program 4: 02:27:53 executing program 1: 02:27:53 executing program 5: 02:27:53 executing program 0: [ 2125.395320][ T6234] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:27:53 executing program 5: 02:27:53 executing program 2: 02:27:53 executing program 0: 02:27:53 executing program 4: 02:27:53 executing program 1: 02:27:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090002e80000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:27:53 executing program 2: 02:27:53 executing program 0: 02:27:53 executing program 5: 02:27:53 executing program 1: [ 2125.650107][ T6259] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:27:53 executing program 4: [ 2125.707389][ T6265] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:27:54 executing program 2: 02:27:54 executing program 0: 02:27:54 executing program 5: 02:27:54 executing program 1: 02:27:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000f00000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:27:54 executing program 4: [ 2125.876263][ T3646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:27:54 executing program 2: [ 2125.957981][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2125.968725][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:27:54 executing program 0: 02:27:54 executing program 5: [ 2125.998580][ T6292] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:27:54 executing program 4: 02:27:54 executing program 1: 02:27:54 executing program 2: [ 2126.111878][ T6300] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:27:54 executing program 0: 02:27:54 executing program 4: 02:27:54 executing program 5: 02:27:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000cf60000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:27:54 executing program 1: 02:27:54 executing program 2: 02:27:54 executing program 4: 02:27:54 executing program 0: 02:27:54 executing program 5: [ 2126.368102][ T6325] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:27:54 executing program 2: 02:27:54 executing program 1: [ 2126.435494][ T6333] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:27:54 executing program 4: 02:27:54 executing program 0: 02:27:54 executing program 5: 02:27:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000fe0000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:27:54 executing program 1: 02:27:54 executing program 2: 02:27:54 executing program 4: 02:27:55 executing program 0: 02:27:55 executing program 1: [ 2126.686573][ T6359] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:27:55 executing program 5: 02:27:55 executing program 2: 02:27:55 executing program 4: [ 2126.783700][ T6366] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:27:55 executing program 0: 02:27:55 executing program 5: 02:27:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900376e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:27:55 executing program 2: 02:27:55 executing program 1: [ 2126.916116][T15234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2126.924244][ T2630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:27:55 executing program 4: 02:27:55 executing program 0: 02:27:55 executing program 5: 02:27:55 executing program 1: 02:27:55 executing program 2: 02:27:55 executing program 4: 02:27:55 executing program 0: 02:27:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900386e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:27:55 executing program 1: 02:27:55 executing program 5: 02:27:55 executing program 2: 02:27:55 executing program 4: 02:27:55 executing program 0: 02:27:55 executing program 1: 02:27:55 executing program 5: 02:27:55 executing program 4: 02:27:55 executing program 2: 02:27:55 executing program 5: 02:27:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900396e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:27:55 executing program 0: 02:27:55 executing program 4: 02:27:55 executing program 1: 02:27:55 executing program 2: 02:27:55 executing program 5: 02:27:55 executing program 1: 02:27:56 executing program 0: 02:27:56 executing program 4: 02:27:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09003a6e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:27:56 executing program 2: 02:27:56 executing program 1: 02:27:56 executing program 5: 02:27:56 executing program 0: 02:27:56 executing program 4: 02:27:56 executing program 2: [ 2127.955994][ T3646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:27:56 executing program 1: 02:27:56 executing program 5: 02:27:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09003b6e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:27:56 executing program 0: 02:27:56 executing program 4: 02:27:56 executing program 2: 02:27:56 executing program 1: 02:27:56 executing program 5: 02:27:56 executing program 4: 02:27:56 executing program 0: 02:27:56 executing program 2: 02:27:56 executing program 5: 02:27:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09003c6e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:27:56 executing program 1: 02:27:56 executing program 4: 02:27:56 executing program 2: 02:27:56 executing program 0: 02:27:56 executing program 5: 02:27:56 executing program 1: [ 2128.516552][T22839] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration 02:27:56 executing program 4: 02:27:56 executing program 0: 02:27:56 executing program 2: 02:27:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09003d6e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:27:56 executing program 5: 02:27:56 executing program 1: 02:27:57 executing program 0: 02:27:57 executing program 4: 02:27:57 executing program 2: 02:27:57 executing program 1: 02:27:57 executing program 5: 02:27:57 executing program 0: 02:27:57 executing program 4: 02:27:57 executing program 2: 02:27:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09003e6e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:27:57 executing program 5: 02:27:57 executing program 1: 02:27:57 executing program 0: [ 2128.996479][ T3646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:27:57 executing program 2: 02:27:57 executing program 4: 02:27:57 executing program 5: 02:27:57 executing program 0: 02:27:57 executing program 1: 02:27:57 executing program 2: 02:27:57 executing program 4: 02:27:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09003f6e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:27:57 executing program 5: 02:27:57 executing program 0: 02:27:57 executing program 1: 02:27:57 executing program 2: 02:27:57 executing program 4: 02:27:57 executing program 5: 02:27:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900406e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:27:57 executing program 1: 02:27:57 executing program 0: 02:27:57 executing program 2: 02:27:57 executing program 4: 02:27:57 executing program 5: 02:27:57 executing program 0: 02:27:57 executing program 1: 02:27:58 executing program 2: 02:27:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900416e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:27:58 executing program 4: 02:27:58 executing program 5: [ 2129.798363][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration 02:27:58 executing program 2: 02:27:58 executing program 1: 02:27:58 executing program 0: 02:27:58 executing program 4: 02:27:58 executing program 5: 02:27:58 executing program 1: [ 2129.955798][T25033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:27:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900426e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) [ 2130.038338][ T2630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:27:58 executing program 2: 02:27:58 executing program 4: 02:27:58 executing program 0: 02:27:58 executing program 1: 02:27:58 executing program 5: 02:27:58 executing program 2: 02:27:58 executing program 0: 02:27:58 executing program 4: 02:27:58 executing program 1: 02:27:58 executing program 5: 02:27:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900436e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:27:58 executing program 2: 02:27:58 executing program 0: 02:27:58 executing program 4: 02:27:58 executing program 1: 02:27:58 executing program 5: [ 2130.446290][ T196] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2130.457039][ T196] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2130.479748][ T6776] nla_validate_range_unsigned: 24 callbacks suppressed [ 2130.479759][ T6776] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:27:58 executing program 0: 02:27:58 executing program 4: [ 2130.566474][ T6786] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:27:58 executing program 2: 02:27:58 executing program 1: 02:27:58 executing program 5: 02:27:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900446e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:27:58 executing program 0: 02:27:59 executing program 4: 02:27:59 executing program 2: 02:27:59 executing program 5: 02:27:59 executing program 1: [ 2130.810962][ T6818] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:27:59 executing program 0: 02:27:59 executing program 4: [ 2130.894113][ T6826] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:27:59 executing program 2: 02:27:59 executing program 5: 02:27:59 executing program 1: 02:27:59 executing program 0: 02:27:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900456e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:27:59 executing program 4: 02:27:59 executing program 2: [ 2131.076415][ T3646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:27:59 executing program 1: 02:27:59 executing program 5: 02:27:59 executing program 0: [ 2131.201935][ T6853] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:27:59 executing program 4: 02:27:59 executing program 2: 02:27:59 executing program 1: [ 2131.310341][ T6867] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:27:59 executing program 5: 02:27:59 executing program 2: 02:27:59 executing program 4: 02:27:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900466e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:27:59 executing program 0: 02:27:59 executing program 1: 02:27:59 executing program 5: 02:27:59 executing program 2: 02:27:59 executing program 4: 02:27:59 executing program 0: [ 2131.583894][ T6894] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:27:59 executing program 1: [ 2131.640656][ T6915] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:27:59 executing program 5: 02:28:00 executing program 2: 02:28:00 executing program 4: [ 2131.716280][T22839] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2131.726999][T22839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:28:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900476e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:28:00 executing program 1: 02:28:00 executing program 0: 02:28:00 executing program 2: 02:28:00 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup3(r1, r0, 0x0) writev(r2, 0x0, 0x0) 02:28:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[], 0x34}}, 0x40) 02:28:00 executing program 1: r0 = socket(0x10, 0x2, 0x0) ioctl$TCGETA(r0, 0x5405, 0x0) [ 2131.906734][ T6941] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:28:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900003f0000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) [ 2131.978312][ T6950] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:28:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000007fffffff000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:28:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900486e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:28:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000000000016e9e000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:28:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000000000016e7b000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:28:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000000000016e4d000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) [ 2132.115653][ T3646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:28:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900016ea500000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:28:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900016e8b00000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:28:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900016e7d00000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:28:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900016e5000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:28:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900496e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:28:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900016e4a00000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:28:00 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x34e, 0x0, 0x0) 02:28:00 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x34e, 0x0, 0x0) 02:28:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900016e3a00000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:28:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09726e010000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:28:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09546e010000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:28:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09004a6e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:28:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09486e010000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:28:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09466e010000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:28:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="096000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:28:01 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x20848007, 0x0, 0x0, 0x0) [ 2132.995758][ T8284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:28:01 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x20848007, 0x0, 0x0, 0x0) 02:28:01 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x20848007, 0x0, 0x0, 0x0) [ 2133.155647][ T3646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:28:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09004b6e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:28:01 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000180)={0xfffffffffffffff8, 0x9, 0x5006cbcd}) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:28:01 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000180)={0xfffffffffffffff8, 0x9}) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:28:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:28:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09004c6e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:28:02 executing program 5: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000180)={0xfffffffffffffff8, 0x0, 0x5006cbcd}) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) [ 2133.907166][ T28] audit: type=1804 audit(1602037682.162:471): pid=7276 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir842677618/syzkaller.TsX4qW/4098/bus" dev="sda1" ino=16342 res=1 errno=0 02:28:02 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000180)={0x0, 0x9, 0x5006cbcd}) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) [ 2134.158458][ T28] audit: type=1804 audit(1602037682.262:472): pid=7278 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3612/bus" dev="sda1" ino=16314 res=1 errno=0 [ 2134.198858][ T3646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2134.277122][T27517] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration 02:28:02 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x20848007, 0x0, 0x0, 0x0) 02:28:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09004d6e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) [ 2134.516265][ T28] audit: type=1804 audit(1602037682.772:473): pid=7307 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir842677618/syzkaller.TsX4qW/4098/bus" dev="sda1" ino=16342 res=1 errno=0 [ 2134.878839][ T28] audit: type=1804 audit(1602037683.142:474): pid=7306 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir072534603/syzkaller.mONvNZ/3752/bus" dev="sda1" ino=15829 res=1 errno=0 [ 2135.235427][ T3646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:28:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09004e6e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) [ 2135.413270][ T28] audit: type=1804 audit(1602037683.672:475): pid=7310 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir513196099/syzkaller.g8if1e/4040/bus" dev="sda1" ino=16315 res=1 errno=0 [ 2135.555997][T27517] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2135.723075][ T28] audit: type=1804 audit(1602037683.932:476): pid=7336 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir072534603/syzkaller.mONvNZ/3752/bus" dev="sda1" ino=15829 res=1 errno=0 [ 2135.868495][ T7339] nla_validate_range_unsigned: 29 callbacks suppressed [ 2135.868507][ T7339] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:28:04 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) [ 2136.035204][T15234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2136.072942][ T7353] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:28:04 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x20848007, 0x0, 0x0, 0x0) [ 2136.167837][ T28] audit: type=1804 audit(1602037684.172:477): pid=7340 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir513196099/syzkaller.g8if1e/4040/bus" dev="sda1" ino=16315 res=1 errno=0 [ 2136.196099][T27517] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2136.206854][T27517] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2136.275238][ T2630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:28:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09004f6e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) [ 2136.959642][ T7370] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2137.070080][ T7377] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2137.131269][ T28] audit: type=1804 audit(1602037685.392:478): pid=7369 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3613/bus" dev="sda1" ino=16367 res=1 errno=0 [ 2137.317539][ T3646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2137.476999][T27517] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2137.487722][T27517] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2137.513297][ T28] audit: type=1804 audit(1602037685.672:479): pid=7371 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3613/bus" dev="sda1" ino=16367 res=1 errno=0 02:28:05 executing program 4: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) [ 2138.355969][ T3646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2138.408032][ T28] audit: type=1804 audit(1602037686.662:480): pid=7395 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir395036401/syzkaller.B3BBtN/3812/bus" dev="sda1" ino=16337 res=1 errno=0 02:28:06 executing program 1: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000180)={0xfffffffffffffff8, 0x9}) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:28:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900506e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:28:06 executing program 5: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000180)={0xfffffffffffffff8, 0x0, 0x5006cbcd}) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) [ 2138.695565][ T7398] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:28:07 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000180)={0x0, 0x9, 0x5006cbcd}) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) [ 2138.931185][ T7412] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2139.075996][T15234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:28:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900516e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) [ 2139.326746][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 2139.326763][ T28] audit: type=1804 audit(1602037687.582:482): pid=7428 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir842677618/syzkaller.TsX4qW/4099/bus" dev="sda1" ino=15812 res=1 errno=0 [ 2139.397463][ T3646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:28:07 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) [ 2139.593561][ T7431] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2139.606729][ T28] audit: type=1804 audit(1602037687.752:483): pid=7402 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir072534603/syzkaller.mONvNZ/3753/bus" dev="sda1" ino=15803 res=1 errno=0 [ 2139.769813][ T7438] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2140.037086][T22839] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2140.156481][ T28] audit: type=1804 audit(1602037687.962:484): pid=7427 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir513196099/syzkaller.g8if1e/4041/bus" dev="sda1" ino=15813 res=1 errno=0 02:28:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900526e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) [ 2140.445014][ T2630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2140.576409][ T28] audit: type=1804 audit(1602037688.182:485): pid=7446 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir072534603/syzkaller.mONvNZ/3753/bus" dev="sda1" ino=15803 res=1 errno=0 [ 2140.720301][ T7466] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2140.800428][ T28] audit: type=1804 audit(1602037688.212:486): pid=7429 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir842677618/syzkaller.TsX4qW/4099/bus" dev="sda1" ino=15812 res=1 errno=0 [ 2140.940683][ T7473] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2141.121312][ T28] audit: type=1804 audit(1602037688.492:487): pid=7456 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir513196099/syzkaller.g8if1e/4041/bus" dev="sda1" ino=15813 res=1 errno=0 02:28:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900536e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) [ 2141.315475][T27517] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2141.428285][ T28] audit: type=1804 audit(1602037689.123:488): pid=7464 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3614/bus" dev="sda1" ino=15953 res=1 errno=0 [ 2141.474788][ T2630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2141.616585][ T7491] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2141.726500][ T28] audit: type=1804 audit(1602037689.803:489): pid=7471 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3614/bus" dev="sda1" ino=15953 res=1 errno=0 [ 2141.865970][ T7502] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2142.117676][T15234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:28:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900546e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:28:10 executing program 4: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) [ 2142.457140][ T7514] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2142.525023][ T1216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2142.588324][ T7521] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:28:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900556e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:28:11 executing program 1: [ 2143.135502][ T28] audit: type=1804 audit(1602037691.403:490): pid=7538 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir395036401/syzkaller.B3BBtN/3813/bus" dev="sda1" ino=16014 res=1 errno=0 [ 2143.245237][ T7540] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2143.380714][ T7553] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2143.433323][ T28] audit: type=1804 audit(1602037691.693:491): pid=7538 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir395036401/syzkaller.B3BBtN/3813/bus" dev="sda1" ino=16014 res=1 errno=0 [ 2143.564999][ T1216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:28:11 executing program 1: 02:28:11 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000180)={0x0, 0x9, 0x5006cbcd}) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:28:12 executing program 5: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000180)={0xfffffffffffffff8, 0x0, 0x5006cbcd}) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:28:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900566e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:28:12 executing program 1: [ 2143.947074][ T7569] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:28:12 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:28:12 executing program 1: [ 2144.116321][ T7578] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:28:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900576e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) [ 2144.564313][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 2144.564330][ T28] audit: type=1804 audit(1602037692.803:494): pid=7597 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir072534603/syzkaller.mONvNZ/3754/bus" dev="sda1" ino=16043 res=1 errno=0 [ 2144.596938][ T1216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2144.814554][ T28] audit: type=1804 audit(1602037692.823:495): pid=7584 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir513196099/syzkaller.g8if1e/4042/bus" dev="sda1" ino=15804 res=1 errno=0 02:28:13 executing program 4: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) [ 2145.053899][ T7604] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2145.155974][ T8284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:28:13 executing program 1: 02:28:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900586e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) [ 2145.564205][ T28] audit: type=1804 audit(1602037693.823:496): pid=7629 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir395036401/syzkaller.B3BBtN/3814/bus" dev="sda1" ino=16115 res=1 errno=0 02:28:13 executing program 1: [ 2145.646801][ T2630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2145.795778][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2145.807315][T27517] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2145.818058][T27517] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2145.846788][ T28] audit: type=1804 audit(1602037693.873:497): pid=7628 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3615/bus" dev="sda1" ino=16046 res=1 errno=0 02:28:14 executing program 1: [ 2146.161968][ T7641] nla_validate_range_unsigned: 2 callbacks suppressed [ 2146.161980][ T7641] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:28:14 executing program 2: [ 2146.273576][ T28] audit: type=1804 audit(1602037694.153:498): pid=7629 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir395036401/syzkaller.B3BBtN/3814/bus" dev="sda1" ino=16115 res=1 errno=0 [ 2146.549787][ T28] audit: type=1804 audit(1602037694.353:499): pid=7630 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3615/bus" dev="sda1" ino=16046 res=1 errno=0 [ 2146.674752][ T1216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:28:15 executing program 5: 02:28:15 executing program 1: 02:28:15 executing program 2: [ 2147.075621][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration 02:28:15 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) 02:28:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900596e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:28:15 executing program 2: 02:28:15 executing program 5: 02:28:15 executing program 1: 02:28:15 executing program 4: 02:28:15 executing program 5: 02:28:15 executing program 1: [ 2147.353176][ T7666] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:28:15 executing program 2: 02:28:15 executing program 4: [ 2147.473046][ T7675] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:28:15 executing program 5: 02:28:15 executing program 2: [ 2147.628707][ T28] audit: type=1804 audit(1602037695.883:500): pid=7691 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3616/bus" dev="sda1" ino=15788 res=1 errno=0 [ 2147.714474][ T1216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2147.807078][ T28] audit: type=1804 audit(1602037696.063:501): pid=7698 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3616/bus" dev="sda1" ino=15788 res=1 errno=0 02:28:16 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) 02:28:16 executing program 1: 02:28:16 executing program 4: 02:28:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09005a6e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:28:16 executing program 5: 02:28:16 executing program 2: [ 2148.068207][ T7706] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:28:16 executing program 5: 02:28:16 executing program 1: 02:28:16 executing program 2: 02:28:16 executing program 4: [ 2148.167227][ T7715] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2148.196089][ T8284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:28:16 executing program 1: 02:28:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09005b6e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) [ 2148.347108][ T28] audit: type=1804 audit(1602037696.603:502): pid=7735 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3617/bus" dev="sda1" ino=16057 res=1 errno=0 [ 2148.527610][ T28] audit: type=1804 audit(1602037696.783:503): pid=7737 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3617/bus" dev="sda1" ino=16057 res=1 errno=0 [ 2148.604697][ T7739] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2148.733421][ T7745] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2148.754902][ T1216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:28:17 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) 02:28:17 executing program 4: 02:28:17 executing program 5: 02:28:17 executing program 2: 02:28:17 executing program 1: 02:28:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09005c6e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:28:17 executing program 2: 02:28:17 executing program 4: 02:28:17 executing program 5: 02:28:17 executing program 1: [ 2148.918874][ T7767] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2149.008155][ T7776] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:28:17 executing program 4: 02:28:17 executing program 2: 02:28:17 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:28:17 executing program 1: 02:28:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09005d6e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:28:17 executing program 4: 02:28:17 executing program 5: 02:28:17 executing program 2: [ 2149.551882][ T7803] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:28:17 executing program 5: 02:28:17 executing program 1: 02:28:17 executing program 4: 02:28:17 executing program 2: 02:28:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09005e6e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:28:18 executing program 5: [ 2149.796259][ T1216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2149.873938][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 2149.873955][ T28] audit: type=1804 audit(1602037698.123:506): pid=7832 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3619/bus" dev="sda1" ino=16080 res=1 errno=0 02:28:18 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:28:18 executing program 1: 02:28:18 executing program 4: 02:28:18 executing program 5: 02:28:18 executing program 2: 02:28:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09005f6e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:28:18 executing program 4: 02:28:18 executing program 5: 02:28:19 executing program 2: 02:28:19 executing program 1: 02:28:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900606e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:28:19 executing program 4: [ 2150.833802][ T2630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2151.047000][ T28] audit: type=1804 audit(1602037699.303:507): pid=7898 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3620/bus" dev="sda1" ino=16109 res=1 errno=0 [ 2151.237037][ T8284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2151.554663][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2151.567260][ T196] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2151.577971][ T196] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:28:20 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:28:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900616e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:28:20 executing program 5: 02:28:20 executing program 2: 02:28:20 executing program 1: 02:28:20 executing program 4: [ 2151.873683][ T2630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:28:20 executing program 4: 02:28:20 executing program 5: 02:28:20 executing program 1: 02:28:20 executing program 2: [ 2151.925110][ T7928] nla_validate_range_unsigned: 7 callbacks suppressed [ 2151.925126][ T7928] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:28:20 executing program 4: [ 2152.052310][ T7936] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:28:20 executing program 5: [ 2152.194897][ T148] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2152.304357][ T28] audit: type=1804 audit(1602037700.554:508): pid=7958 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3621/bus" dev="sda1" ino=16085 res=1 errno=0 [ 2152.915025][ T2630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:28:21 executing program 1: 02:28:21 executing program 2: 02:28:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900626e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:28:21 executing program 5: 02:28:21 executing program 4: 02:28:21 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:28:21 executing program 5: 02:28:21 executing program 1: [ 2153.154938][ T7965] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:28:21 executing program 2: 02:28:21 executing program 4: [ 2153.255933][ T7976] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:28:21 executing program 1: 02:28:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900636e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:28:21 executing program 2: 02:28:21 executing program 5: 02:28:21 executing program 4: 02:28:21 executing program 2: 02:28:21 executing program 1: [ 2153.531723][ T7999] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2153.599660][ T28] audit: type=1804 audit(1602037701.854:509): pid=7998 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3622/bus" dev="sda1" ino=16307 res=1 errno=0 [ 2153.690828][ T8007] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2153.741477][ T28] audit: type=1804 audit(1602037701.994:510): pid=7998 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3622/bus" dev="sda1" ino=16307 res=1 errno=0 [ 2153.955657][T32026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:28:22 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:28:22 executing program 5: 02:28:22 executing program 2: 02:28:22 executing program 4: 02:28:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900646e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:28:22 executing program 1: 02:28:22 executing program 4: 02:28:22 executing program 1: 02:28:22 executing program 5: [ 2154.099643][ T8031] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:28:22 executing program 2: [ 2154.205465][ T8041] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:28:22 executing program 4: [ 2154.241455][ T28] audit: type=1804 audit(1602037702.494:511): pid=8034 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3623/bus" dev="sda1" ino=16085 res=1 errno=0 [ 2154.248907][ T8034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2154.275842][T25033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:28:22 executing program 5: [ 2154.375070][ T28] audit: type=1804 audit(1602037702.634:512): pid=8048 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3623/bus" dev="sda1" ino=16085 res=1 errno=0 [ 2154.418724][ T8034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2154.532788][ T8034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2154.569396][ T8034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2154.631712][ T8034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2154.642513][ T8034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2154.656534][ T8034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2154.666468][ T8034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:28:22 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:28:22 executing program 1: 02:28:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900656e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:28:22 executing program 2: 02:28:22 executing program 4: 02:28:22 executing program 5: 02:28:23 executing program 2: [ 2154.763594][ T8068] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:28:23 executing program 5: 02:28:23 executing program 1: 02:28:23 executing program 4: [ 2154.851031][ T8080] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:28:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900666e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:28:23 executing program 2: [ 2155.044661][ T28] audit: type=1804 audit(1602037703.294:513): pid=8096 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3624/bus" dev="sda1" ino=16078 res=1 errno=0 [ 2155.228937][ T28] audit: type=1804 audit(1602037703.484:514): pid=8097 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3624/bus" dev="sda1" ino=16078 res=1 errno=0 02:28:24 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:28:24 executing program 4: 02:28:24 executing program 1: 02:28:24 executing program 5: 02:28:24 executing program 2: 02:28:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900676e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:28:24 executing program 1: 02:28:24 executing program 5: 02:28:24 executing program 4: 02:28:24 executing program 2: 02:28:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900686e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:28:24 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind(r0, &(0x7f0000000000)=@ipx={0x4, 0x0, 0x0, "3c63f55e2a50"}, 0x80) [ 2156.044425][ T28] audit: type=1804 audit(1602037704.294:515): pid=8140 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3625/bus" dev="sda1" ino=16078 res=1 errno=0 [ 2156.269378][ T28] audit: type=1804 audit(1602037704.514:516): pid=8148 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3625/bus" dev="sda1" ino=16078 res=1 errno=0 02:28:24 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x2, &(0x7f0000000100)={0x0, 'veth0\x00'}, 0x18) 02:28:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000002840)={0x0, 0x0, 0x0}, 0x0) 02:28:24 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x3f0, 0x1f8, 0xe8, 0x308, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@arp={@empty, @empty, 0x0, 0x0, 0x0, 0x0, {@mac=@multicast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'vlan1\x00', 'batadv_slave_0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @broadcast, @broadcast}}}, {{@arp={@empty, @empty, 0x0, 0x0, 0x0, 0x0, {@mac}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'wg2\x00', 'geneve1\x00', {}, {}, 0x0, 0x94d9e03fce0f54dc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @broadcast, @loopback}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x440) 02:28:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_VHT_CAPABILITY_MASK={0x10}]}, 0x2c}}, 0x0) 02:28:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900696e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:28:24 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:28:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x891d, &(0x7f0000000080)={'wlan0\x00'}) 02:28:24 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x3, 0x1ff, 0x100000, 0x2, 0x6}, 0x14) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='hybla\x00', 0x6) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000140)=@gcm_256={{0x303}, "0fa45f21bd49ea74", "f84a7ccaa77046f33dd91cc8aa0ae87fdf396a758ce85cda174481e77e9c2a11", "1d70ad17", "340ebf0ccb287c4a"}, 0x38) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000100)={0x1, 'veth0_to_batadv\x00', 0x1}, 0x18) setsockopt$inet_tcp_buf(r0, 0x6, 0xe, &(0x7f0000000180)="b555c566accd30ad5aed1326e6048acc8a", 0x11) r2 = accept(r1, &(0x7f0000001d80)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000001e00)=0x80) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000001e40)={r3, @empty, @local}, 0xc) bind(r2, &(0x7f00000001c0)=@llc={0x1a, 0x4, 0x0, 0xb3, 0x5, 0x0, @random="a6a0cee34a95"}, 0x80) socket$inet_tcp(0x2, 0x1, 0x0) [ 2156.674711][T27517] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration 02:28:25 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000002f40)={0x0, 'bond0\x00'}, 0x18) 02:28:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09006a6e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:28:25 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000100)={{0x11, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'sh\x00'}, {@local}}, 0x44) 02:28:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}, 0x0) [ 2156.894294][ T8219] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_batadv, syncid = 1, id = 0 [ 2156.937219][ T28] audit: type=1804 audit(1602037705.184:517): pid=8211 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3626/bus" dev="sda1" ino=16063 res=1 errno=0 [ 2156.960169][ T8220] nla_validate_range_unsigned: 7 callbacks suppressed [ 2156.960179][ T8220] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2157.111542][ T8234] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2157.128772][ T28] audit: type=1804 audit(1602037705.324:518): pid=8218 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3626/bus" dev="sda1" ino=16063 res=1 errno=0 [ 2157.320024][ T196] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration 02:28:25 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:28:25 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect(r0, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], 0x1, 0x0}}, 0x80) 02:28:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09006b6e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:28:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x18, r1, 0x5d228159fcb75293, 0x0, 0x0, {{}, {@void, @void}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x4}]]}, 0x18}}, 0x0) 02:28:25 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x2, &(0x7f0000000100)={0x2, 'veth0\x00'}, 0x18) [ 2157.439607][ T8251] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:28:25 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) 02:28:25 executing program 4: syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001c40)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001c80)={'wlan0\x00'}) [ 2157.515189][ T8267] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:28:26 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x3, 0x1ff, 0x100000, 0x2, 0x6}, 0x14) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='hybla\x00', 0x6) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000140)=@gcm_256={{0x303}, "0fa45f21bd49ea74", "f84a7ccaa77046f33dd91cc8aa0ae87fdf396a758ce85cda174481e77e9c2a11", "1d70ad17", "340ebf0ccb287c4a"}, 0x38) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000100)={0x1, 'veth0_to_batadv\x00', 0x1}, 0x18) setsockopt$inet_tcp_buf(r0, 0x6, 0xe, &(0x7f0000000180)="b555c566accd30ad5aed1326e6048acc8a", 0x11) r2 = accept(r1, &(0x7f0000001d80)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000001e00)=0x80) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000001e40)={r3, @empty, @local}, 0xc) bind(r2, &(0x7f00000001c0)=@llc={0x1a, 0x4, 0x0, 0xb3, 0x5, 0x0, @random="a6a0cee34a95"}, 0x80) socket$inet_tcp(0x2, 0x1, 0x0) 02:28:26 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x6, 0x11, &(0x7f0000000500)={0x0, {{0x2, 0x0, @multicast1}}}, 0x90) 02:28:26 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x6, 0x8, &(0x7f0000000100)={0x0, 'veth0\x00'}, 0x18) 02:28:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09006c6e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) [ 2157.716984][ T28] audit: type=1804 audit(1602037705.974:519): pid=8285 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3627/bus" dev="sda1" ino=16314 res=1 errno=0 02:28:26 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x0, @broadcast}}, 0x0, 0x0, 0x0, 0x0, "8be611c99e130f78021f0cbea66d3630cccd320ee5e4abd5d57eee66b9ea5d158a634c496ad06185d81936e6b2eaa8c9ffc65b028c9ef0ad018cd7c39c971df81c6a5118a5d6bc84760f7404177f662f"}, 0xd8) [ 2157.914437][ T28] audit: type=1804 audit(1602037706.144:520): pid=8291 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3627/bus" dev="sda1" ino=16314 res=1 errno=0 [ 2157.955470][ T196] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2158.080364][ T8302] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2158.170406][ T8315] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:28:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09006d6e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:28:26 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'veth0\x00'}, 0x18) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="10002cbd7000fbdbdf254c00000008000300b24c7883970a24e0bd3e5f67fb7d591d155c8367b470f78f7589c283582ef6c20bff26621a4ed2b707e6feb4bd59eeb9750b2a0b391126fd1c2b0120d39cb8d2633981a039b9c2479be16425df023c5eb6c02a06c27d0877b023682b33bf62e82be9318e6e879b7799accad3450ff3de6cccd4e3be12b04d157aa7321626cfa5ff1317c60c5614882aae33a9e78bb550cedda24ddda2e454794fef0dd8c36a5d2883ee", @ANYRES32=0x0, @ANYBLOB="0c00990001000080750000000c00580076000000000000000c0058000e000000000000000c0058006f000000000000000c0058005e000000000000000c0058004d00000000000000"], 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x4000040) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f00000001c0)={0x2, 'veth1_to_bridge\x00'}, 0x18) 02:28:26 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x18, &(0x7f0000000300), 0x14) 02:28:26 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:28:26 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x7, 0x4, 0x3b8, 0x1e8, 0x0, 0x100, 0x2d0, 0x2d0, 0x2d0, 0x4, 0x0, {[{{@arp={@broadcast, @loopback, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bond_slave_0\x00', 'team_slave_1\x00'}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "ef499889e479bf89bd2f3901fe664e6dc1221649280d1d716c840902205a"}}, {{@arp={@multicast2, @rand_addr, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'gretap0\x00', 'batadv_slave_1\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 0x0, 0x0, {@mac=@dev}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_batadv\x00', 'veth1_to_bond\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00'}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x408) [ 2158.308160][ T8334] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0, syncid = 0, id = 0 [ 2158.320292][ T8337] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:28:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000001080)={0x1, &(0x7f0000001000)=[{0x6}]}, 0x10) 02:28:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @val={0xc}}}}, 0x28}}, 0x0) [ 2158.416323][ T8349] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2158.541168][ T28] audit: type=1804 audit(1602037706.794:521): pid=8351 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3628/bus" dev="sda1" ino=16308 res=1 errno=0 [ 2158.680690][ T28] audit: type=1804 audit(1602037706.934:522): pid=8364 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3628/bus" dev="sda1" ino=16308 res=1 errno=0 02:28:27 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x3, 0x1ff, 0x100000, 0x2, 0x6}, 0x14) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='hybla\x00', 0x6) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000140)=@gcm_256={{0x303}, "0fa45f21bd49ea74", "f84a7ccaa77046f33dd91cc8aa0ae87fdf396a758ce85cda174481e77e9c2a11", "1d70ad17", "340ebf0ccb287c4a"}, 0x38) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000100)={0x1, 'veth0_to_batadv\x00', 0x1}, 0x18) setsockopt$inet_tcp_buf(r0, 0x6, 0xe, &(0x7f0000000180)="b555c566accd30ad5aed1326e6048acc8a", 0x11) r2 = accept(r1, &(0x7f0000001d80)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000001e00)=0x80) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000001e40)={r3, @empty, @local}, 0xc) bind(r2, &(0x7f00000001c0)=@llc={0x1a, 0x4, 0x0, 0xb3, 0x5, 0x0, @random="a6a0cee34a95"}, 0x80) socket$inet_tcp(0x2, 0x1, 0x0) 02:28:27 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f0000000080)=0x3ff, 0x4) 02:28:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09006e6e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:28:27 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x19, 0x0, 0x0) 02:28:27 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001d40)='nl80211\x00') sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000000000000001f"], 0x1c}}, 0x0) 02:28:27 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:28:27 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000580)={@multicast2, @dev={0xac, 0x14, 0x14, 0x32}, @private}, 0xc) 02:28:27 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x4, &(0x7f0000002f40)={0x0, 'bond0\x00'}, 0x18) [ 2158.995377][ T8373] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2159.030124][ T8375] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2159.091089][ T8383] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2159.122574][ T8391] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2159.153756][T32026] net_ratelimit: 15 callbacks suppressed [ 2159.153766][T32026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:28:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09006f6e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:28:27 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000440)={0x2, 0x0, @remote}, 0x10) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) shutdown(r0, 0x0) 02:28:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f0000013280)={0x0, 0x0, &(0x7f0000013240)={&(0x7f0000000cc0)={0xec4, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @void}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x14, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0xe8c, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_PKT_PATTERN={0xe88, 0x4, 0x0, 0x1, [{0x258, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0x69, 0x1, "ea1a6de79cfd5fcd6838b020858b844da5363327bd1ee978f76bf33cbe925e2248cb02460c0e25fa735f3a2f4f242883be7fbcecb24a5124b6d1138ef531b208fcf0c9a4d92d7acbd03344c54fe24514c2d63712e8fbac350116763fd45519cf25584db843"}, @NL80211_PKTPAT_PATTERN={0xf5, 0x2, "1935b9159251e01b7d43c489c7ea6e15de600aa0ff8b0fafebd94620333f61a590a4174adc9faeb39e35899e7890ae257297c33defb117e452b5fd95d48a9c0431c41b70df5d8c1faea87107fbdae456ec1c4c3de7a66cc218f0ac206b580595389860ef03eb7c3dfd115f0f831acb5b0cf8ad941b9e710170c6e30a65399c893d1180caa88af3864cedd7070439bcfcdbcfb4c1cac378990d8f5d044285250889541a2ee2c870cbcfc78df93ca2eedf713f774ee47cdadbd508c8d1b61c38ec4bf311f2040fbddc2b03c2a11de1ca32599dd0a71c3d36212de850b3828cb5891d94e20f8fbe385d7a4c663f52858bee60"}, @NL80211_PKTPAT_OFFSET={0x8}, @NL80211_PKTPAT_PATTERN={0xe5, 0x2, "997f3949bfe41d92b91730b5bbffdece0d1d581b998515614198dbd6eb87e03f545c62b0504b19df93021d7b161159613f768f330085d24d51f8e92e6e274d6decf26a27eb6be9e16a3f0ab602b33278588bfa56bdf65f347510fa2d48f6c6837c51ea491caf586d21ca3e381165399fccf0561f8fd6fefd60d05944ad695de9fda4ec8cb66bee57ca8f2b241df8e48d26c22d3550b44b6b87f6e16adef930b2bc81368968746c6669ee3d5f0408d13a0efc1d222e8a80c5bc11b57998b3bcec0fb76252a095013d2398015150943864ab2f02fcd26e27a817f44256679d458332"}]}, {0xc2c, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x6}, @NL80211_PKTPAT_OFFSET={0x8}, @NL80211_PKTPAT_MASK={0xed, 0x1, "c4097dcb10101813b721972b21729d54e5762c64818056cd0a170619515f04df27628d8cda44cde4d73a1812ab69cc1d39e93c442607897dc6e5b0c647e3cbf8566e2316ada11cfb31074f676e2802c3411d93443f236b705830974a3324ebbcc9c4c938a777998180271ee325d88d5296c50f8c01d52362cf8bad8370cedc28b0153f7ba4f4541974768e0ef6cbdb71a74c9a15883e41b300c3e167935ce83968c3ebb3e2dcddc1bb46466b4cce862b36185829444f7a1494d7be6f8375f864f7d4258b3a1a338e9a03df876dc2724647d88b80b9d31983a06676c0213f62d15ee0ee9eb64ee9aa75"}, @NL80211_PKTPAT_PATTERN={0x19, 0x2, "1047aa46ab5af4d42b28d8c9047e6929e9106a75fb"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x7f}, @NL80211_PKTPAT_OFFSET={0x8}, @NL80211_PKTPAT_MASK={0xaf9, 0x1, "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"}]}]}]}]}, 0xec4}}, 0x0) 02:28:27 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000340)={'filter\x00', 0x4}, 0x68) 02:28:28 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x3, 0x1ff, 0x100000, 0x2, 0x6}, 0x14) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='hybla\x00', 0x6) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000140)=@gcm_256={{0x303}, "0fa45f21bd49ea74", "f84a7ccaa77046f33dd91cc8aa0ae87fdf396a758ce85cda174481e77e9c2a11", "1d70ad17", "340ebf0ccb287c4a"}, 0x38) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000100)={0x1, 'veth0_to_batadv\x00', 0x1}, 0x18) setsockopt$inet_tcp_buf(r0, 0x6, 0xe, &(0x7f0000000180)="b555c566accd30ad5aed1326e6048acc8a", 0x11) r2 = accept(r1, &(0x7f0000001d80)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000001e00)=0x80) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000001e40)={r3, @empty, @local}, 0xc) bind(r2, &(0x7f00000001c0)=@llc={0x1a, 0x4, 0x0, 0xb3, 0x5, 0x0, @random="a6a0cee34a95"}, 0x80) socket$inet_tcp(0x2, 0x1, 0x0) 02:28:28 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'veth0\x00'}, 0x18) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="10002cbd7000fbdbdf254c00000008000300b24c7883970a24e0bd3e5f67fb7d591d155c8367b470f78f7589c283582ef6c20bff26621a4ed2b707e6feb4bd59eeb9750b2a0b391126fd1c2b0120d39cb8d2633981a039b9c2479be16425df023c5eb6c02a06c27d0877b023682b33bf62e82be9318e6e879b7799accad3450ff3de6cccd4e3be12b04d157aa7321626cfa5ff1317c60c5614882aae33a9e78bb550cedda24ddda2e454794fef0dd8c36a5d2883ee", @ANYRES32=0x0, @ANYBLOB="0c00990001000080750000000c00580076000000000000000c0058000e000000000000000c0058006f000000000000000c0058005e000000000000000c0058004d00000000000000"], 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x4000040) socket$inet_tcp(0x2, 0x1, 0x0) 02:28:28 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x32, 0x0, 0x0) 02:28:28 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x17, &(0x7f0000000040), 0x4) 02:28:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900706e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:28:28 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:28:28 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x60, &(0x7f0000002f40)={0x0, 'bond0\x00'}, 0x18) 02:28:28 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0x8, &(0x7f0000000080)={@in6={{0xa, 0x4e24, 0x0, @mcast2}}, 0x0, 0x0, 0x0, 0x0, "a24cf40c65c38e2a864017d1333e3c910432cc2525660ff2e91eba45db2b8853c5c4d0dc9a36de1ce9890cd3eb77f5c5b83b77ea003da532be47c883246e1daa41f5a34f1d756d7e018d21cc6ef20897"}, 0xd8) 02:28:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x1c}}, 0x0) [ 2160.146396][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 2160.146413][ T28] audit: type=1804 audit(1602037708.404:525): pid=8465 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3630/bus" dev="sda1" ino=16367 res=1 errno=0 [ 2160.193747][ T2630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:28:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900716e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) [ 2160.353707][T15234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:28:28 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x40000}, 0x0) [ 2160.386158][ T28] audit: type=1804 audit(1602037708.544:526): pid=8479 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3630/bus" dev="sda1" ino=16367 res=1 errno=0 02:28:28 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x418, 0x0, 0x220, 0x110, 0x330, 0x330, 0x330, 0x4, 0x0, {[{{@arp={@private, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'veth0\x00'}, 0xc0, 0xdf}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @private, @broadcast}}}, {{@arp={@local, @broadcast, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1\x00', 'syzkaller0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @private, @loopback}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @mac=@random="dbe986b21ebc", @broadcast}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x468) 02:28:29 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x3, 0x1ff, 0x100000, 0x2, 0x6}, 0x14) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='hybla\x00', 0x6) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000140)=@gcm_256={{0x303}, "0fa45f21bd49ea74", "f84a7ccaa77046f33dd91cc8aa0ae87fdf396a758ce85cda174481e77e9c2a11", "1d70ad17", "340ebf0ccb287c4a"}, 0x38) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000100)={0x1, 'veth0_to_batadv\x00', 0x1}, 0x18) setsockopt$inet_tcp_buf(r0, 0x6, 0xe, &(0x7f0000000180)="b555c566accd30ad5aed1326e6048acc8a", 0x11) r2 = accept(r1, &(0x7f0000001d80)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000001e00)=0x80) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000001e40)={r3, @empty, @local}, 0xc) bind(r2, &(0x7f00000001c0)=@llc={0x1a, 0x4, 0x0, 0xb3, 0x5, 0x0, @random="a6a0cee34a95"}, 0x80) 02:28:29 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000340)={0x0, {{0x2, 0x0, @loopback}}, {{0x2, 0x0, @multicast2}}}, 0x108) 02:28:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)={0x2c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_NAN_FUNC={0x10, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}]}]}, 0x2c}}, 0x0) 02:28:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900726e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:28:29 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r5, 0xc0185879, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:28:29 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) 02:28:29 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000000)={0x0, {{0x2, 0x0, @broadcast}}}, 0x88) 02:28:29 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001d40)='nl80211\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x24}}, 0x0) 02:28:29 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="ba35992d66dc423cf238aa16987dfcdc", 0x10) 02:28:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900736e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:28:29 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x60, 0x0, 0x0) [ 2161.154285][T22839] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration 02:28:29 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0xf, &(0x7f0000000000)={@multicast2, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) [ 2161.232916][ T2630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:28:30 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x3, 0x1ff, 0x100000, 0x2, 0x6}, 0x14) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='hybla\x00', 0x6) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000140)=@gcm_256={{0x303}, "0fa45f21bd49ea74", "f84a7ccaa77046f33dd91cc8aa0ae87fdf396a758ce85cda174481e77e9c2a11", "1d70ad17", "340ebf0ccb287c4a"}, 0x38) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000100)={0x1, 'veth0_to_batadv\x00', 0x1}, 0x18) setsockopt$inet_tcp_buf(r0, 0x6, 0xe, &(0x7f0000000180)="b555c566accd30ad5aed1326e6048acc8a", 0x11) accept(r1, &(0x7f0000001d80)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000001e00)=0x80) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000001e40)={r2, @empty, @local}, 0xc) 02:28:30 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='westwood\x00', 0x9) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) 02:28:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}]}, 0x28}}, 0x0) 02:28:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00') sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r1, 0x83, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x4a}, @void, @val={0xc}}}}, 0x28}}, 0x0) 02:28:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900746e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:28:30 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r5, 0xc0185879, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) [ 2161.803305][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2161.814052][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:28:30 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect(r0, &(0x7f00000001c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80) 02:28:30 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x4) 02:28:30 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000000000), 0x4) 02:28:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900756e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:28:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x38}, @val={0x8, 0x3, r2}, @val={0xc}}}}, 0x30}}, 0x0) 02:28:30 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000000)={@rand_addr, @loopback}, 0xc) [ 2162.273282][ T2630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2162.289094][ T8640] nla_validate_range_unsigned: 12 callbacks suppressed [ 2162.289104][ T8640] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2162.380787][ T8653] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2162.433390][ T196] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2162.444150][ T196] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:28:31 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x3, 0x1ff, 0x100000, 0x2, 0x6}, 0x14) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='hybla\x00', 0x6) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000140)=@gcm_256={{0x303}, "0fa45f21bd49ea74", "f84a7ccaa77046f33dd91cc8aa0ae87fdf396a758ce85cda174481e77e9c2a11", "1d70ad17", "340ebf0ccb287c4a"}, 0x38) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000100)={0x1, 'veth0_to_batadv\x00', 0x1}, 0x18) setsockopt$inet_tcp_buf(r0, 0x6, 0xe, &(0x7f0000000180)="b555c566accd30ad5aed1326e6048acc8a", 0x11) accept(r1, &(0x7f0000001d80)=@xdp, &(0x7f0000001e00)=0x80) 02:28:31 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x21, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'sh\x00'}, 0x2c) 02:28:31 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x1c}}, 0x0) shutdown(r0, 0x1) recvmsg(r0, &(0x7f0000003440)={0x0, 0x0, 0x0}, 0x10002) 02:28:31 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r5, 0xc0185879, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:28:31 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='yeah\x00', 0x5) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) 02:28:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900766e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:28:31 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) 02:28:31 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000040)='wg0\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) [ 2162.860204][ T8672] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:28:31 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000fc0)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x20, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CQM={0x4}]}, 0x20}}, 0x0) [ 2162.981349][ T8687] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:28:31 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x15, &(0x7f00000004c0), 0x4) [ 2163.085093][ T196] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration 02:28:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900776e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:28:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002b80)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000004480)='nl80211\x00') syz_genetlink_get_family_id$nl80211(&(0x7f00000045c0)='nl80211\x00') [ 2163.325344][ T2630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2163.326793][ T8714] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2163.387402][ T8726] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2163.396033][T25033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:28:31 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x3, 0x1ff, 0x100000, 0x2, 0x6}, 0x14) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='hybla\x00', 0x6) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000140)=@gcm_256={{0x303}, "0fa45f21bd49ea74", "f84a7ccaa77046f33dd91cc8aa0ae87fdf396a758ce85cda174481e77e9c2a11", "1d70ad17", "340ebf0ccb287c4a"}, 0x38) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000100)={0x1, 'veth0_to_batadv\x00', 0x1}, 0x18) setsockopt$inet_tcp_buf(r0, 0x6, 0xe, &(0x7f0000000180)="b555c566accd30ad5aed1326e6048acc8a", 0x11) 02:28:31 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r5, 0xc0185879, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:28:31 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @dev}, 0xc) 02:28:31 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000001080)={0x2, &(0x7f0000001000)=[{0x2d}, {0x6}]}, 0x10) 02:28:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900786e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:28:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f00000000c0)={0x6c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_BEACON_HEAD={0x41, 0xe, {@with_ht, 0x0, @random, 0x0, @val, @void, @void, @void, @void, @void, @val={0x25, 0x3}, @void, @val={0x3c, 0x4}, @void, @val={0x72, 0x6}, @void, @void}}]}, 0x6c}}, 0x0) 02:28:32 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f00000001c0)=0x7a15a5ec, 0x4) [ 2163.794710][ T8753] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:28:32 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x6, 0x24, &(0x7f0000000100)={0x0, 'veth0\x00'}, 0x18) [ 2163.908927][ T8762] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:28:32 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f00000005c0)=0x3f, 0x4) [ 2163.994636][ T28] audit: type=1804 audit(1602037712.235:527): pid=8761 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3634/bus" dev="sda1" ino=16314 res=1 errno=0 02:28:32 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x487, &(0x7f00000000c0)={{0x84, @rand_addr, 0x0, 0x0, 'dh\x00'}, {@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x44) 02:28:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900796e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) [ 2164.137946][ T28] audit: type=1804 audit(1602037712.395:528): pid=8761 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3634/bus" dev="sda1" ino=16314 res=1 errno=0 02:28:32 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x1c}}, 0x0) recvmsg(r0, &(0x7f0000003440)={0x0, 0x0, &(0x7f0000003340)=[{&(0x7f00000021c0)=""/4096, 0x1000}], 0x1}, 0x10002) [ 2164.301838][ T8789] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2164.356177][ T2630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2164.399694][ T8803] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:28:32 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x3, 0x1ff, 0x100000, 0x2, 0x6}, 0x14) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='hybla\x00', 0x6) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000140)=@gcm_256={{0x303}, "0fa45f21bd49ea74", "f84a7ccaa77046f33dd91cc8aa0ae87fdf396a758ce85cda174481e77e9c2a11", "1d70ad17", "340ebf0ccb287c4a"}, 0x38) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000100)={0x1, 'veth0_to_batadv\x00', 0x1}, 0x18) 02:28:32 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000040), 0x4) 02:28:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) connect$netlink(r0, &(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x40000}, 0xc) 02:28:32 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000000)={0x8, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev}}}, 0x108) 02:28:32 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r5, 0xc0185879, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:28:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09007a6e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:28:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) 02:28:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={0x0}}, 0x0) 02:28:33 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x4, &(0x7f0000000000)={0x1102}, 0x18) 02:28:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09007b6e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) [ 2164.882144][ T28] audit: type=1804 audit(1602037713.135:529): pid=8842 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3635/bus" dev="sda1" ino=16367 res=1 errno=0 02:28:33 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) listen(r0, 0x0) [ 2164.999549][ T28] audit: type=1804 audit(1602037713.255:530): pid=8842 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3635/bus" dev="sda1" ino=16367 res=1 errno=0 02:28:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00') sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r1, 0x301, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) [ 2165.400894][ T1216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:28:33 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x3, 0x1ff, 0x100000, 0x2, 0x6}, 0x14) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='hybla\x00', 0x6) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000140)=@gcm_256={{0x303}, "0fa45f21bd49ea74", "f84a7ccaa77046f33dd91cc8aa0ae87fdf396a758ce85cda174481e77e9c2a11", "1d70ad17", "340ebf0ccb287c4a"}, 0x38) 02:28:33 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000540)={0x2, 0x0, @remote}, 0x10) 02:28:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x88, 0x4) 02:28:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09007c6e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:28:33 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x6, 0x25, &(0x7f0000000100)={0x0, 'veth0\x00'}, 0x18) 02:28:33 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r5, 0xc0185879, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:28:33 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x1a, 0x0, 0x0) 02:28:33 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x8, &(0x7f0000002f40)={0x0, 'bond0\x00'}, 0x18) 02:28:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000200)=[{0xb1}, {0x6}]}, 0x10) [ 2165.849727][ T28] audit: type=1804 audit(1602037714.105:531): pid=8909 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3636/bus" dev="sda1" ino=16314 res=1 errno=0 02:28:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09007d6e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:28:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x1c, r1, 0x1, 0x0, 0x0, {{0x1b}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 02:28:34 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@timestamping={{0x14}}, @mark={{0x14}}], 0x30}, 0x0) [ 2166.028028][ T28] audit: type=1804 audit(1602037714.225:532): pid=8909 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3636/bus" dev="sda1" ino=16314 res=1 errno=0 02:28:34 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x3, 0x1ff, 0x100000, 0x2, 0x6}, 0x14) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='hybla\x00', 0x6) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) 02:28:34 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000240)={0x80000001, 0x0, 0x0, 0x4}, 0x14) 02:28:34 executing program 1: sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x9b050000) 02:28:34 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:28:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r0, &(0x7f00000026c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000004880)=ANY=[], 0x2120}, 0x0) 02:28:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09007e6e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) [ 2166.432476][ T8284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2166.440745][ T8284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:28:34 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8, 0x40) 02:28:34 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000240)={&(0x7f0000000080)=@in={0x2, 0x4e23, @loopback}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=[@timestamping={{0x14, 0x1, 0x25, 0x300}}], 0x18}, 0x0) recvmsg(r0, &(0x7f0000008e40)={0x0, 0x0, 0x0}, 0x2001) 02:28:34 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380)='nl80211\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001140)={0x28, r0, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 02:28:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09007f6e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:28:35 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='ip6gretap0\x00', 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) [ 2166.706027][ T28] audit: type=1804 audit(1602037714.965:533): pid=8987 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3637/bus" dev="sda1" ino=16384 res=1 errno=0 [ 2166.839024][ T9000] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 02:28:35 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x1c}}, 0x0) recvmsg(r0, &(0x7f0000003440)={0x0, 0x0, 0x0}, 0x10002) [ 2166.871979][ T28] audit: type=1804 audit(1602037715.125:534): pid=8987 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3637/bus" dev="sda1" ino=16384 res=1 errno=0 [ 2166.912976][ T196] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2166.924646][T27517] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2166.935426][T27517] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2166.964587][ T9010] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 02:28:35 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x3, 0x1ff, 0x100000, 0x2, 0x6}, 0x14) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='hybla\x00', 0x6) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) 02:28:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00') sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 02:28:35 executing program 5: 02:28:35 executing program 4: 02:28:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900806e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:28:35 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) [ 2167.434424][ T9036] nla_validate_range_unsigned: 12 callbacks suppressed [ 2167.434435][ T9036] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:28:35 executing program 5: 02:28:35 executing program 4: [ 2167.490673][ T1216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:28:35 executing program 1: [ 2167.590670][ T9047] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2167.616799][ T28] audit: type=1804 audit(1602037715.875:535): pid=9041 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3638/bus" dev="sda1" ino=16384 res=1 errno=0 02:28:36 executing program 5: 02:28:36 executing program 4: 02:28:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900816e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) [ 2167.816712][ T28] audit: type=1804 audit(1602037715.975:536): pid=9041 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3638/bus" dev="sda1" ino=16384 res=1 errno=0 [ 2167.971536][ T9069] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2168.032394][ T9075] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2168.193103][ T196] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2168.203831][ T196] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:28:36 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x3, 0x1ff, 0x100000, 0x2, 0x6}, 0x14) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='hybla\x00', 0x6) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) 02:28:36 executing program 1: 02:28:36 executing program 5: 02:28:36 executing program 4: 02:28:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900826e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:28:36 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:28:36 executing program 4: [ 2168.330097][ T9095] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:28:36 executing program 1: 02:28:36 executing program 5: [ 2168.410602][ T9108] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:28:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900836e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:28:36 executing program 1: 02:28:36 executing program 4: [ 2168.521765][T32026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2168.671059][ T28] audit: type=1804 audit(1602037716.925:537): pid=9124 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3639/bus" dev="sda1" ino=16322 res=1 errno=0 [ 2168.691496][ T9128] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2168.775703][ T9139] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2168.791024][ T28] audit: type=1804 audit(1602037716.965:538): pid=9124 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3639/bus" dev="sda1" ino=16322 res=1 errno=0 [ 2168.844931][T27517] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration 02:28:37 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x3, 0x1ff, 0x100000, 0x2, 0x6}, 0x14) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) 02:28:37 executing program 5: 02:28:37 executing program 1: 02:28:37 executing program 4: 02:28:37 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r3 = dup(0xffffffffffffffff) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r5, 0xc0185879, 0x0) sendfile(r3, r4, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:28:37 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900846e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:28:37 executing program 5: 02:28:37 executing program 1: 02:28:37 executing program 4: [ 2169.241736][ T9156] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2169.337436][ T9164] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2169.373757][ T28] audit: type=1804 audit(1602037717.625:539): pid=9163 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3640/bus" dev="sda1" ino=16018 res=1 errno=0 02:28:37 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900856e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:28:37 executing program 4: [ 2169.474496][ T8284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:28:37 executing program 1: [ 2169.546319][ T28] audit: type=1804 audit(1602037717.795:540): pid=9163 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3640/bus" dev="sda1" ino=16018 res=1 errno=0 [ 2169.569985][T32026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:28:38 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x3, 0x1ff, 0x100000, 0x2, 0x6}, 0x14) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) 02:28:38 executing program 5: 02:28:38 executing program 4: 02:28:38 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r3 = dup(0xffffffffffffffff) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r5, 0xc0185879, 0x0) sendfile(r3, r4, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:28:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900866e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:28:38 executing program 1: 02:28:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900876e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:28:38 executing program 1: 02:28:38 executing program 5: 02:28:38 executing program 4: 02:28:38 executing program 1: 02:28:38 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r3 = dup(0xffffffffffffffff) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r5, 0xc0185879, 0x0) sendfile(r3, r4, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) [ 2170.592244][ T3646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2170.896517][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 2170.896535][ T28] audit: type=1804 audit(1602037719.155:544): pid=9271 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3642/bus" dev="sda1" ino=15877 res=1 errno=0 02:28:39 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x3, 0x1ff, 0x100000, 0x2, 0x6}, 0x14) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) 02:28:39 executing program 5: 02:28:39 executing program 4: 02:28:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900886e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:28:39 executing program 1: 02:28:39 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:28:39 executing program 4: 02:28:39 executing program 5: [ 2171.271030][ T28] audit: type=1804 audit(1602037719.525:545): pid=9278 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3643/bus" dev="sda1" ino=15842 res=1 errno=0 02:28:39 executing program 1: [ 2171.333692][ T9278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2171.348971][ T9278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:28:39 executing program 4: [ 2171.374318][ T9278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:28:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900896e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:28:39 executing program 5: [ 2171.436815][ T28] audit: type=1804 audit(1602037719.695:546): pid=9305 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3643/bus" dev="sda1" ino=15842 res=1 errno=0 [ 2171.474417][ T9278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2171.526620][ T9278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2171.562607][ T9278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2171.618012][ T9278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:28:40 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='hybla\x00', 0x6) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) 02:28:40 executing program 1: 02:28:40 executing program 4: 02:28:40 executing program 5: 02:28:40 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:28:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09008a6e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) [ 2172.043980][ T148] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration 02:28:40 executing program 1: 02:28:40 executing program 5: [ 2172.183434][ T28] audit: type=1804 audit(1602037720.445:547): pid=9338 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3644/bus" dev="sda1" ino=16215 res=1 errno=0 02:28:40 executing program 4: 02:28:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09008b6e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:28:40 executing program 1: [ 2172.390814][ T28] audit: type=1804 audit(1602037720.635:548): pid=9365 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3644/bus" dev="sda1" ino=16215 res=1 errno=0 02:28:40 executing program 5: [ 2172.513238][ T9370] nla_validate_range_unsigned: 12 callbacks suppressed [ 2172.513250][ T9370] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2172.586288][ T9376] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2172.682585][ T148] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration 02:28:41 executing program 2: setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='hybla\x00', 0x6) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) 02:28:41 executing program 4: 02:28:41 executing program 1: 02:28:41 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:28:41 executing program 5: 02:28:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09008c6e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:28:41 executing program 4: 02:28:41 executing program 5: 02:28:41 executing program 1: [ 2173.103697][ T9398] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:28:41 executing program 2: setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='hybla\x00', 0x6) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) [ 2173.189727][ T28] audit: type=1804 audit(1602037721.446:549): pid=9400 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3645/bus" dev="sda1" ino=16278 res=1 errno=0 [ 2173.259751][ T9415] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:28:41 executing program 5: 02:28:41 executing program 4: [ 2173.368981][ T28] audit: type=1804 audit(1602037721.626:550): pid=9417 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3645/bus" dev="sda1" ino=16278 res=1 errno=0 02:28:41 executing program 2: setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='hybla\x00', 0x6) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) 02:28:41 executing program 1: 02:28:41 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r3 = dup(r2) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r5, 0xc0185879, 0x0) sendfile(r3, r4, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:28:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09008d6e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:28:41 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='hybla\x00', 0x6) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) 02:28:41 executing program 4: 02:28:41 executing program 5: 02:28:41 executing program 1: 02:28:42 executing program 4: [ 2173.696088][ T9441] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:28:42 executing program 5: [ 2173.770854][ T28] audit: type=1804 audit(1602037722.026:551): pid=9439 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3646/bus" dev="sda1" ino=16261 res=1 errno=0 [ 2173.783867][ T9455] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:28:42 executing program 1: [ 2173.850867][ T28] audit: type=1804 audit(1602037722.086:552): pid=9439 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3646/bus" dev="sda1" ino=16261 res=1 errno=0 02:28:42 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r3 = dup(r2) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r5, 0xc0185879, 0x0) sendfile(r3, r4, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:28:42 executing program 5: 02:28:42 executing program 4: [ 2173.952404][T22839] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration 02:28:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09008e6e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:28:42 executing program 4: [ 2174.193533][ T9475] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2174.233593][ T28] audit: type=1804 audit(1602037722.496:553): pid=9476 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3647/bus" dev="sda1" ino=16182 res=1 errno=0 [ 2174.268397][ T9482] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:28:42 executing program 5: 02:28:42 executing program 1: 02:28:42 executing program 4: 02:28:42 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='hybla\x00', 0x6) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) 02:28:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09008f6e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:28:42 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r3 = dup(r2) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r5, 0xc0185879, 0x0) sendfile(r3, r4, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:28:42 executing program 4: [ 2174.576752][ T9503] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2174.592156][T22839] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration 02:28:42 executing program 5: 02:28:42 executing program 1: [ 2174.708732][ T9520] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:28:43 executing program 1: [ 2174.761802][ T2630] net_ratelimit: 428 callbacks suppressed [ 2174.761812][ T2630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:28:43 executing program 4: 02:28:43 executing program 1: 02:28:43 executing program 5: 02:28:43 executing program 4: 02:28:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900906e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:28:43 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='hybla\x00', 0x6) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) 02:28:43 executing program 1: 02:28:43 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ftruncate(0xffffffffffffffff, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r3 = dup(r2) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r5, 0xc0185879, 0x0) sendfile(r3, r4, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:28:43 executing program 4: 02:28:43 executing program 5: 02:28:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900916e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:28:43 executing program 1: [ 2175.552128][T15234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:28:43 executing program 4: 02:28:43 executing program 5: 02:28:44 executing program 1: 02:28:44 executing program 4: [ 2175.792434][ T3646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:28:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900926e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) [ 2176.019924][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 2176.019941][ T28] audit: type=1804 audit(1602037724.276:558): pid=9598 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3649/bus" dev="sda1" ino=16177 res=1 errno=0 02:28:44 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) 02:28:44 executing program 4: 02:28:44 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, 0x0, &(0x7f0000000080)) 02:28:44 executing program 1: r0 = socket(0xa, 0x3, 0x1) recvmmsg(r0, &(0x7f0000002100)=[{{0x0, 0x0, 0x0}}], 0x1, 0xa020, 0x0) 02:28:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900936e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:28:44 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ftruncate(0xffffffffffffffff, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r3 = dup(r2) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r5, 0xc0185879, 0x0) sendfile(r3, r4, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:28:44 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000000c0)={0x9, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x104) 02:28:44 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000006600)={{{@in6=@private2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x6e6bb2, 0x2}, {{@in6=@mcast1}, 0x0, @in6=@loopback}}, 0xe4) 02:28:44 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000080)={{0x2, 0x0, @multicast1}, {0x0, @link_local}, 0x8, {0x2, 0x0, @dev}, 'vlan1\x00'}) 02:28:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900946e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:28:44 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00'}) 02:28:44 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000000)="da", 0x1) [ 2176.637357][ T28] audit: type=1804 audit(1602037724.876:559): pid=9656 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3650/bus" dev="sda1" ino=16325 res=1 errno=0 [ 2176.771458][ T28] audit: type=1804 audit(1602037724.976:560): pid=9656 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3650/bus" dev="sda1" ino=16325 res=1 errno=0 [ 2176.837673][T32026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:28:45 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) 02:28:45 executing program 5: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000080)='user\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000100)="bc", 0x1, r0) 02:28:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000400)={&(0x7f0000000300), 0x3, &(0x7f00000003c0)={&(0x7f0000000340)={0x60, 0x0, 0x0, 0x0, 0x0, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0x8, 0x9, @remote}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8}]}, 0x60}}, 0x0) 02:28:45 executing program 1: symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000040)='./file0\x00') 02:28:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900956e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:28:45 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ftruncate(0xffffffffffffffff, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r3 = dup(r2) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r5, 0xc0185879, 0x0) sendfile(r3, r4, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:28:45 executing program 5: syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') 02:28:45 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000100)={'NETMAP\x00'}, &(0x7f00000001c0)=0x1e) 02:28:45 executing program 1: syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter\x00') 02:28:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900966e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) [ 2177.515472][ T28] audit: type=1804 audit(1602037725.766:561): pid=9724 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3651/bus" dev="sda1" ino=16384 res=1 errno=0 02:28:45 executing program 1: socket(0x1, 0x0, 0xff7fffff) 02:28:45 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r0, 0x0, 0xe, 0x0, &(0x7f0000000080)) [ 2177.733963][ T28] audit: type=1804 audit(1602037725.906:562): pid=9712 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3651/bus" dev="sda1" ino=16384 res=1 errno=0 [ 2177.744740][ T9734] nla_validate_range_unsigned: 12 callbacks suppressed [ 2177.744750][ T9734] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2177.792510][T22839] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2177.871465][ T2630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2177.886605][ T9742] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:28:46 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) 02:28:46 executing program 1: syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_trie\x00') syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') 02:28:46 executing program 5: syz_open_procfs(0x0, &(0x7f0000000080)='net/protocols\x00') 02:28:46 executing program 4: r0 = getpid() pipe2(&(0x7f00000006c0)={0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000006c0)={0xffffffffffffffff}, 0x0) kcmp(r0, r0, 0x0, r1, r2) 02:28:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900976e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:28:46 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) getpgid(0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r3 = dup(r2) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r5, 0xc0185879, 0x0) sendfile(r3, r4, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) [ 2178.262781][ T9765] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:28:46 executing program 5: r0 = socket(0xa, 0x3, 0x3) sendmsg$alg(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@op={0x10}, @iv={0x6c, 0x117, 0x2, 0x5b, "20e894ac0e5a1829dd4584231f6a06a3d06f1635493895d1decccf31cc8f73808308d1ab87d11eed1aa35a5889a0f1955492637be920b1d0cc4110f9d5481e23fe23bbf9f19974662e7532763f722d1f4efbcd39f60e5637e11639"}, @assoc={0x10}, @op, @assoc, @op={0x10}], 0x10d4}, 0x0) 02:28:46 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x0, 0x0, &(0x7f0000000100)) 02:28:46 executing program 1: pipe2(&(0x7f00000006c0)={0xffffffffffffffff}, 0x0) read$FUSE(r0, 0x0, 0x0) [ 2178.355669][ T9778] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2178.368661][ T28] audit: type=1804 audit(1602037726.636:563): pid=9782 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3652/bus" dev="sda1" ino=16322 res=1 errno=0 [ 2178.432867][T27517] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2178.443590][T27517] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:28:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900986e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:28:46 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) write$binfmt_elf64(r0, 0x0, 0x0) 02:28:46 executing program 1: lsetxattr$security_evm(&(0x7f0000000000)='\x00', 0x0, 0x0, 0x0, 0x0) [ 2178.513751][ T28] audit: type=1804 audit(1602037726.746:564): pid=9789 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3652/bus" dev="sda1" ino=16322 res=1 errno=0 [ 2178.591367][T15234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2178.670310][ T9805] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2178.716933][ T9816] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2178.911188][ T3646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:28:47 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='hybla\x00', 0x6) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) 02:28:47 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) getpgid(0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r3 = dup(r2) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r5, 0xc0185879, 0x0) sendfile(r3, r4, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:28:47 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r0, 0x0, 0x22, 0x0, &(0x7f0000000040)) 02:28:47 executing program 1: r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x440, 0x0) getdents(r0, 0x0, 0x0) 02:28:47 executing program 5: r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='@', 0x1, r1) keyctl$invalidate(0x15, r2) 02:28:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900996e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) [ 2179.146157][ T9832] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:28:47 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000540)={{{@in6=@dev, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x0, 0xf55c7296dc4c7b3b}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x0, @in6=@private2}}, 0xe4) 02:28:47 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) setsockopt$inet6_mreq(r1, 0x29, 0x0, 0x0, 0x0) [ 2179.246684][ T9849] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2179.263815][ T28] audit: type=1804 audit(1602037727.526:565): pid=9851 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3653/bus" dev="sda1" ino=16342 res=1 errno=0 02:28:47 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/mcfilter6\x00') lseek(r0, 0x0, 0x2) 02:28:47 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='hybla\x00', 0x6) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) 02:28:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09009a6e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) [ 2179.408042][ T28] audit: type=1804 audit(1602037727.636:566): pid=9864 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3653/bus" dev="sda1" ino=16342 res=1 errno=0 02:28:47 executing program 4: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$FIBMAP(r0, 0x1, 0x0) 02:28:47 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) getpgid(0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r3 = dup(r2) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r5, 0xc0185879, 0x0) sendfile(r3, r4, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:28:47 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='hybla\x00', 0x6) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) 02:28:47 executing program 1: request_key(&(0x7f00000002c0)='logon\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0) 02:28:47 executing program 5: r0 = socket(0xa, 0x3, 0x1) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x4000841) 02:28:47 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={0x0, @nfc, @qipcrtr, @ipx={0x4, 0x0, 0x0, "eeb4a51a9b02"}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)='caif0\x00'}) [ 2179.573628][ T9874] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2179.650268][ T9890] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:28:48 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='hybla\x00', 0x6) connect$inet(r0, 0x0, 0x0) [ 2179.711797][T27517] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2179.722534][T27517] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:28:48 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000080)={{0x2, 0x0, @multicast1}, {0x1, @remote}, 0x2, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'ipvlan0\x00'}) 02:28:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09009b6e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:28:48 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r0, 0x0, 0xf, 0x0, &(0x7f0000000000)) [ 2179.776354][ T28] audit: type=1804 audit(1602037728.036:567): pid=9907 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3654/bus" dev="sda1" ino=16384 res=1 errno=0 02:28:48 executing program 4: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00') 02:28:48 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='hybla\x00', 0x6) connect$inet(r0, 0x0, 0x0) 02:28:48 executing program 1: open$dir(0x0, 0x404940, 0x0) [ 2179.952247][ T3646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2180.352288][T22839] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration 02:28:48 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r3 = dup(r2) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r5, 0xc0185879, 0x0) sendfile(r3, r4, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:28:48 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000000)=0x81, 0x4) 02:28:48 executing program 4: r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$revoke(0x3, r0) 02:28:48 executing program 1: syz_open_procfs(0x0, &(0x7f0000000000)='net/unix\x00') 02:28:48 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='hybla\x00', 0x6) connect$inet(r0, 0x0, 0x0) 02:28:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09009c6e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:28:48 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0}, 0x50) 02:28:48 executing program 2: add_key(&(0x7f00000001c0)='id_legacy\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) 02:28:48 executing program 4: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r1) keyctl$setperm(0x5, r2, 0x0) 02:28:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09009d6e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:28:48 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020) 02:28:49 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter6\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/rt6_stats\x00') copy_file_range(r1, &(0x7f00000000c0)=0x80, r0, &(0x7f0000000100), 0x464, 0x0) 02:28:49 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r3 = dup(r2) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r5, 0xc0185879, 0x0) sendfile(r3, r4, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:28:49 executing program 2: io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r0, 0x0, 0x0) 02:28:49 executing program 5: r0 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, r0) 02:28:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09009e6e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:28:49 executing program 1: getresuid(&(0x7f000000ab80), 0x0, 0x0) getresgid(&(0x7f000000ac40), &(0x7f000000ac80), &(0x7f000000acc0)) 02:28:49 executing program 4: r0 = epoll_create1(0x0) fsetxattr$security_ima(r0, &(0x7f0000000000)='security.ima\x00', 0x0, 0x0, 0x0) [ 2180.992278][T32026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:28:49 executing program 5: r0 = getpid() kcmp(r0, r0, 0xd8c648c82fd7297, 0xffffffffffffffff, 0xffffffffffffffff) 02:28:49 executing program 2: add_key(&(0x7f0000000000)='cifs.spnego\x00', 0x0, &(0x7f0000000080)='d', 0x1, 0xfffffffffffffffd) [ 2181.158295][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 2181.158311][ T28] audit: type=1804 audit(1602037729.416:571): pid=10031 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3656/bus" dev="sda1" ino=16253 res=1 errno=0 02:28:49 executing program 1: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$chown(0x4, r0, 0x0, 0xffffffffffffffff) 02:28:49 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r3 = dup(r2) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r5, 0xc0185879, 0x0) sendfile(r3, r4, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:28:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09009f6e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:28:49 executing program 4: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000440)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$revoke(0x3, r0) keyctl$describe(0x6, r0, 0x0, 0x0) [ 2181.326888][ T28] audit: type=1804 audit(1602037729.456:572): pid=10031 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3656/bus" dev="sda1" ino=16253 res=1 errno=0 02:28:49 executing program 5: pipe2(&(0x7f00000006c0)={0xffffffffffffffff}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(r0, 0x0, r1, 0x0, 0xb230, 0x0) 02:28:49 executing program 2: rt_sigprocmask(0x2, &(0x7f00000011c0), &(0x7f0000001200), 0x8) 02:28:49 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000000)={0x401, {{0x2, 0x0, @multicast2}}}, 0x8c) 02:28:49 executing program 4: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/mcfilter6\x00') r0 = socket(0x11, 0x3, 0x0) sendmmsg$unix(r0, &(0x7f0000001440)=[{&(0x7f0000000000)=@abs, 0x6e, 0x0}], 0x1, 0x0) [ 2181.539653][ T28] audit: type=1804 audit(1602037729.796:573): pid=10085 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3657/bus" dev="sda1" ino=16239 res=1 errno=0 02:28:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900a06e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) [ 2181.630985][T25033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:28:49 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) [ 2181.686295][ T28] audit: type=1804 audit(1602037729.906:574): pid=10085 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3657/bus" dev="sda1" ino=16239 res=1 errno=0 02:28:50 executing program 2: syz_open_procfs(0x0, &(0x7f00000000c0)='net/dev\x00') 02:28:50 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, 0x0) 02:28:50 executing program 4: epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x8) 02:28:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900a16e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:28:50 executing program 2: syz_open_procfs(0xffffffffffffffff, &(0x7f00000010c0)='cpuset\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='gid_map\x00') [ 2181.961022][ T28] audit: type=1804 audit(1602037730.216:575): pid=10123 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3658/bus" dev="sda1" ino=16217 res=1 errno=0 02:28:50 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x40002) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x0) [ 2182.035807][ T3646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2182.083822][T10123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2182.122457][T10123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2182.164578][ T28] audit: type=1804 audit(1602037730.426:576): pid=10129 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3658/bus" dev="sda1" ino=16217 res=1 errno=0 [ 2182.282596][T10123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2182.332327][T10123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2182.358288][T10123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2182.411253][T10123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:28:50 executing program 5: pipe2(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) read$FUSE(r0, 0x0, 0x0) 02:28:50 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000001020101080000000000000000000000240001801400018008088100000090b3ac056782ac1e00010c0002"], 0x38}}, 0x0) 02:28:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900a26e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:28:50 executing program 2: syz_open_procfs(0x0, &(0x7f0000000040)='net/ptype\x00') 02:28:50 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r0, 0x9) 02:28:51 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:28:51 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0xffffffffffffff3c) 02:28:51 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, 0x0, &(0x7f0000000180)) 02:28:51 executing program 2: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r1) 02:28:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900a36e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:28:51 executing program 5: openat$nvram(0xffffff9c, &(0x7f0000004bc0)='/dev/nvram\x00', 0x0, 0x0) 02:28:51 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/dev\x00') pipe2(&(0x7f00000006c0)={0xffffffffffffffff}, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0x0, 0x0) 02:28:51 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) 02:28:51 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth1_macvtap\x00', 0x2}, 0x18) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a40)={{0x2, 0x4e24, @remote}, {0x0, @local}, 0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'macvtap0\x00'}) [ 2182.905134][T10191] nla_validate_range_unsigned: 15 callbacks suppressed [ 2182.905145][T10191] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2183.003263][T10202] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2183.048910][ T28] audit: type=1804 audit(1602037731.296:577): pid=10192 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3659/bus" dev="sda1" ino=16238 res=1 errno=0 02:28:51 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvfrom$unix(r0, 0x0, 0x0, 0x21, 0x0, 0x0) 02:28:51 executing program 4: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0xfffffffffffffd1e) [ 2183.259910][ T28] audit: type=1804 audit(1602037731.517:578): pid=10210 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3659/bus" dev="sda1" ino=16238 res=1 errno=0 02:28:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900a46e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) [ 2183.456578][T10236] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2183.516880][T10248] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2183.552343][T22839] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration 02:28:51 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:28:51 executing program 5: faccessat(0xffffffffffffffff, 0x0, 0x24) 02:28:51 executing program 2: add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) getresuid(&(0x7f00000009c0), &(0x7f0000004f40), &(0x7f0000004f80)) 02:28:51 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/vlan/vlan1\x00') read$FUSE(r0, 0x0, 0x0) 02:28:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900a56e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:28:52 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) 02:28:52 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x3a6}]}) [ 2183.772395][T10265] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2183.853238][T10279] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2183.996168][ T28] audit: type=1804 audit(1602037732.257:579): pid=10282 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3660/bus" dev="sda1" ino=16373 res=1 errno=0 02:28:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) io_setup(0x7, &(0x7f0000000080)=0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) io_submit(r1, 0x2, &(0x7f00000014c0)=[&(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1}]) 02:28:52 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f0000000100)) 02:28:52 executing program 2: signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) 02:28:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900a66e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:28:52 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000080)={{}, {0x6, @multicast}, 0x16, {0x2, 0x0, @local}, 'ipvlan1\x00'}) [ 2184.152821][ T28] audit: type=1804 audit(1602037732.407:580): pid=10297 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3660/bus" dev="sda1" ino=16373 res=1 errno=0 [ 2184.192114][T27517] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2184.339328][T10307] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2184.373163][T10318] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:28:52 executing program 0: write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r3 = dup(r2) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r5, 0xc0185879, 0x0) sendfile(r3, r4, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:28:52 executing program 2: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='projid_map\x00') 02:28:52 executing program 4: pipe2(&(0x7f00000006c0)={0xffffffffffffffff}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) splice(r0, 0x0, r1, &(0x7f0000000080), 0xb230, 0x0) 02:28:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900a76e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:28:52 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000000000), 0x0) 02:28:52 executing program 5: io_setup(0x0, &(0x7f0000000040)) io_setup(0x4, &(0x7f00000000c0)) 02:28:52 executing program 2: r0 = socket(0x11, 0x3, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, 0x0, 0x0) [ 2184.586276][T10337] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:28:52 executing program 1: syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') 02:28:52 executing program 4: r0 = getpid() r1 = getpgrp(0x0) kcmp(r0, r1, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) [ 2184.698690][T10351] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:28:53 executing program 5: pipe2(&(0x7f00000006c0), 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='fd/3\x00') 02:28:53 executing program 2: open$dir(&(0x7f0000000000)='./file0\x00', 0x440, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x373140, 0x0) 02:28:53 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) connect(r0, 0x0, 0x0) 02:28:53 executing program 0: write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r3 = dup(r2) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r5, 0xc0185879, 0x0) sendfile(r3, r4, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:28:53 executing program 1: r0 = socket(0x2, 0xa, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={0x0}}, 0x0) 02:28:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900a86e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:28:53 executing program 2: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps_rollup\x00') 02:28:53 executing program 5: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RRENAME(r0, &(0x7f0000000100)={0x7}, 0x7) write$P9_RWRITE(r0, &(0x7f0000000180)={0xb}, 0xfffffffffffffeb0) 02:28:53 executing program 4: futimesat(0xffffffffffffff9c, 0x0, &(0x7f0000000200)={{0x0, 0xea60}}) 02:28:53 executing program 1: r0 = socket(0x11, 0x3, 0x0) sendmmsg$unix(r0, &(0x7f0000001440)=[{0x0, 0x0, 0x0}], 0x1, 0x0) [ 2185.150596][ T2630] net_ratelimit: 254 callbacks suppressed [ 2185.150606][ T2630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:28:53 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@mangle={'mangle\x00', 0x1f, 0x6, 0x468, 0x128, 0x1f4, 0x128, 0x1f4, 0x308, 0x3d4, 0x3d4, 0x3d4, 0x3d4, 0x3d4, 0x6, 0x0, {[{{@ip={@dev, @rand_addr, 0x0, 0x0, 'batadv_slave_1\x00', 'virt_wifi0\x00'}, 0x0, 0x70, 0x94}, @TTL={0x24, 'TTL\x00'}}, {{@ip={@local, @multicast2, 0x0, 0x0, '\x00', 'wg2\x00'}, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0x9c, 0xcc, 0x0, {}, [@common=@addrtype={{0x2c, 'addrtype\x00'}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @dev}}}, {{@uncond, 0x0, 0xe4, 0x114, 0x0, {}, [@common=@osf={{0x50, 'osf\x00'}, {'syz0\x00'}}, @inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @remote}}}, {{@uncond, 0x0, 0x9c, 0xcc, 0x0, {}, [@common=@ah={{0x2c, 'ah\x00'}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @private}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x4c4) 02:28:53 executing program 2: r0 = epoll_create1(0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000010c0)='cpuset\x00') sendfile(r1, r0, 0x0, 0x0) 02:28:53 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) accept4$unix(r0, 0x0, 0x0, 0x0) [ 2185.299143][T10394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2185.335865][T10394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:28:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900a96e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) [ 2185.368048][T10394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:28:53 executing program 4: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$link(0x8, r0, r1) [ 2185.438934][T10394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2185.475539][T27517] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2185.487909][T22839] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2185.498623][T22839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2185.540573][T10394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2185.596353][T10394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2185.640782][T10394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2185.686123][T10394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:28:54 executing program 0: write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r3 = dup(r2) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r5, 0xc0185879, 0x0) sendfile(r3, r4, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:28:54 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r0, 0x0, 0x0, 0x160, 0x0, 0x0) 02:28:54 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a40)={{0x2, 0x0, @local}, {0x0, @random="5b60b75f95f6"}, 0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}) 02:28:54 executing program 5: request_key(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0) 02:28:54 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000740)=@security={'security\x00', 0xe, 0x4, 0x364, 0xffffffff, 0x0, 0x190, 0x0, 0xffffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @broadcast, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0x9c, 0xf8, 0x0, {}, [@common=@addrtype={{0x2c, 'addrtype\x00'}}]}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00'}}, {{@uncond, 0x0, 0xe0, 0x140, 0x0, {}, [@common=@socket0={{0x20, 'socket\x00'}}, @common=@osf={{0x50, 'osf\x00'}, {'syz0\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x3c0) 02:28:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900aa6e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:28:54 executing program 5: r0 = socket(0xa, 0x3, 0x1) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x0) 02:28:54 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000001c0)={{{@in6=@empty, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast}, 0x0, @in=@remote}}, 0xe4) 02:28:54 executing program 1: r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, r0) keyctl$revoke(0x3, r0) 02:28:54 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000140)={{{@in=@dev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}}, {{@in6=@private2}}}, 0xe4) 02:28:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900ab6e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:28:54 executing program 5: keyctl$setperm(0x5, 0x0, 0xd9cb298d65f4dd09) 02:28:54 executing program 0: r0 = open(0x0, 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:28:54 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000440)=@filter={'filter\x00', 0xe, 0x4, 0x2a8, 0xffffffff, 0x1f4, 0x110, 0x110, 0xffffffff, 0xffffffff, 0x2ac, 0x2ac, 0x2ac, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x90, 0xec, 0x0, {}, [@common=@socket0={{0x20, 'socket\x00'}}]}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x70, 0x94}, @REJECT={0x24, 'REJECT\x00'}}, {{@ip={@remote, @empty, 0x0, 0x0, 'veth0_to_team\x00', 'tunl0\x00'}, 0x0, 0x70, 0x94}, @REJECT={0x24, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x304) 02:28:54 executing program 2: add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f00000001c0)='&', 0x1, 0xfffffffffffffffb) 02:28:54 executing program 4: 02:28:54 executing program 5: r0 = getpid() kcmp(r0, r0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) 02:28:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900ac6e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:28:54 executing program 4: add_key(&(0x7f0000000080)='logon\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000200)='$', 0x1, 0xfffffffffffffffd) 02:28:54 executing program 5: statx(0xffffffffffffffff, 0x0, 0x4500, 0x0, 0x0) 02:28:54 executing program 1: perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 02:28:54 executing program 2: syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') [ 2186.525576][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 2186.525594][ T28] audit: type=1804 audit(1602037734.787:587): pid=10532 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3664/bus" dev="sda1" ino=16033 res=1 errno=0 02:28:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900ad6e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:28:54 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a40)={{0x2, 0x0, @remote}, {0x0, @multicast}, 0x29, {0x2, 0x0, @broadcast}, 'veth1_to_batadv\x00'}) [ 2186.687937][ T28] audit: type=1804 audit(1602037734.947:588): pid=10560 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3664/bus" dev="sda1" ino=16033 res=1 errno=0 02:28:55 executing program 0: r0 = open(0x0, 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:28:55 executing program 4: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, r0, &(0x7f0000000180)='cifs.idmap\x00', &(0x7f00000000c0)={'syz', 0x2}, r0) 02:28:55 executing program 1: add_key$fscrypt_provisioning(&(0x7f0000000000)='fscrypt-provisioning\x00', 0x0, &(0x7f0000001500)=ANY=[], 0xfc, 0xfffffffffffffffd) 02:28:55 executing program 2: add_key$keyring(&(0x7f0000000080)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$assume_authority(0x10, 0x0) 02:28:55 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a40)={{0x2, 0x0, @remote}, {0x0, @multicast}, 0x29, {0x2, 0x0, @broadcast}, 'veth1_to_batadv\x00'}) 02:28:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900ae6e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:28:55 executing program 1: syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp\x00') 02:28:55 executing program 4: r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x440, 0x0) getdents64(r0, 0x0, 0x0) 02:28:55 executing program 2: add_key$keyring(&(0x7f00000035c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff8) [ 2187.105278][ T28] audit: type=1804 audit(1602037735.367:589): pid=10598 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3665/bus" dev="sda1" ino=16269 res=1 errno=0 02:28:55 executing program 5: r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r0, 0x0) 02:28:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900af6e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:28:55 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000ac0)=ANY=[], 0x50c) [ 2187.290217][ T28] audit: type=1804 audit(1602037735.547:590): pid=10619 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3665/bus" dev="sda1" ino=16269 res=1 errno=0 02:28:55 executing program 4: r0 = getpid() kcmp(r0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) 02:28:55 executing program 1: rt_sigtimedwait(&(0x7f00000002c0), 0x0, &(0x7f0000000380), 0x8) 02:28:55 executing program 5: rmdir(&(0x7f0000000040)='./file0/file0\x00') 02:28:55 executing program 0: r0 = open(0x0, 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:28:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900b06e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:28:55 executing program 2: 02:28:55 executing program 4: 02:28:55 executing program 5: 02:28:55 executing program 1: [ 2187.696373][ T28] audit: type=1804 audit(1602037735.957:591): pid=10668 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3666/bus" dev="sda1" ino=16325 res=1 errno=0 02:28:56 executing program 2: 02:28:56 executing program 4: [ 2187.879386][ T28] audit: type=1804 audit(1602037736.137:592): pid=10685 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3666/bus" dev="sda1" ino=16325 res=1 errno=0 02:28:56 executing program 5: 02:28:56 executing program 1: 02:28:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900b16e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:28:56 executing program 2: 02:28:56 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:28:56 executing program 4: 02:28:56 executing program 1: 02:28:56 executing program 5: [ 2188.136359][T10703] nla_validate_range_unsigned: 18 callbacks suppressed [ 2188.136371][T10703] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:28:56 executing program 2: [ 2188.232982][T10711] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:28:56 executing program 4: 02:28:56 executing program 1: 02:28:56 executing program 5: 02:28:56 executing program 2: [ 2188.382994][ T28] audit: type=1804 audit(1602037736.647:593): pid=10722 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3667/bus" dev="sda1" ino=16033 res=1 errno=0 02:28:56 executing program 4: 02:28:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900b26e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:28:56 executing program 1: [ 2188.583143][ T28] audit: type=1804 audit(1602037736.837:594): pid=10736 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3667/bus" dev="sda1" ino=16033 res=1 errno=0 [ 2188.658918][T10742] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2188.681006][ T196] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2188.735820][T10748] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:28:57 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:28:57 executing program 5: 02:28:57 executing program 1: 02:28:57 executing program 2: 02:28:57 executing program 4: 02:28:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900b36e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:28:57 executing program 4: 02:28:57 executing program 2: [ 2188.940753][T10769] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:28:57 executing program 5: 02:28:57 executing program 1: [ 2189.035338][ T28] audit: type=1804 audit(1602037737.297:595): pid=10771 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3668/bus" dev="sda1" ino=16323 res=1 errno=0 02:28:57 executing program 4: [ 2189.124268][T10782] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:28:57 executing program 2: [ 2189.230621][ T28] audit: type=1804 audit(1602037737.487:596): pid=10787 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3668/bus" dev="sda1" ino=16323 res=1 errno=0 02:28:57 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:28:57 executing program 1: 02:28:57 executing program 5: 02:28:57 executing program 4: 02:28:57 executing program 2: 02:28:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900b46e0100000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:28:57 executing program 2: 02:28:57 executing program 4: 02:28:57 executing program 5: 02:28:57 executing program 1: r0 = inotify_init1(0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, 0x0) [ 2189.540740][T10807] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2189.678628][T10819] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:28:58 executing program 2: 02:28:58 executing program 5: 02:28:58 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:28:58 executing program 1: 02:28:58 executing program 4: 02:28:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000000200000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:28:58 executing program 2: 02:28:58 executing program 5: [ 2189.959416][T27517] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration 02:28:58 executing program 4: 02:28:58 executing program 2: [ 2190.058773][T10844] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:28:58 executing program 1: 02:28:58 executing program 5: 02:28:58 executing program 4: [ 2190.202619][T10859] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:28:58 executing program 1: [ 2190.350421][T32026] net_ratelimit: 1262 callbacks suppressed [ 2190.350432][T32026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2190.425270][T10862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2190.507545][T10862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2190.527616][T10862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2190.539676][T10862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2190.573918][T10862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2190.604815][T10862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2190.649357][T10862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2190.694092][T10862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2190.715944][T10862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:28:59 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:28:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000000300000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:28:59 executing program 2: 02:28:59 executing program 5: 02:28:59 executing program 4: 02:28:59 executing program 1: 02:28:59 executing program 4: 02:28:59 executing program 2: 02:28:59 executing program 1: 02:28:59 executing program 5: 02:28:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000400300000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) [ 2191.230803][ T196] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2191.232282][ T148] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration 02:28:59 executing program 4: 02:28:59 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:28:59 executing program 2: 02:28:59 executing program 1: 02:28:59 executing program 5: 02:28:59 executing program 4: 02:28:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900ffff0300000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:00 executing program 5: 02:29:00 executing program 1: 02:29:00 executing program 2: 02:29:00 executing program 4: 02:29:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000000400000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:00 executing program 2: [ 2191.943120][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 2191.943134][ T28] audit: type=1804 audit(1602037740.197:603): pid=10964 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3672/bus" dev="sda1" ino=16309 res=1 errno=0 [ 2192.126396][ T28] audit: type=1804 audit(1602037740.387:604): pid=10972 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3672/bus" dev="sda1" ino=16309 res=1 errno=0 02:29:00 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, 0x0, 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:29:00 executing program 5: 02:29:00 executing program 1: 02:29:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000000800000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:00 executing program 2: 02:29:00 executing program 4: 02:29:00 executing program 2: 02:29:00 executing program 4: 02:29:00 executing program 1: 02:29:00 executing program 5: 02:29:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000001000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:00 executing program 2: [ 2192.699696][ T28] audit: type=1804 audit(1602037740.957:605): pid=11030 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3673/bus" dev="sda1" ino=16314 res=1 errno=0 [ 2192.893972][ T28] audit: type=1804 audit(1602037741.157:606): pid=11044 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3673/bus" dev="sda1" ino=16314 res=1 errno=0 02:29:01 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, 0x0, 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:29:01 executing program 5: 02:29:01 executing program 4: 02:29:01 executing program 2: 02:29:01 executing program 1: 02:29:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000034000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:01 executing program 2: 02:29:01 executing program 5: [ 2193.185632][T11062] nla_validate_range_unsigned: 12 callbacks suppressed [ 2193.185644][T11062] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:29:01 executing program 1: 02:29:01 executing program 4: [ 2193.331549][T11075] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:29:01 executing program 2: [ 2193.437712][ T28] audit: type=1804 audit(1602037741.697:607): pid=11073 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3674/bus" dev="sda1" ino=15881 res=1 errno=0 02:29:01 executing program 5: [ 2193.644725][ T28] audit: type=1804 audit(1602037741.857:608): pid=11073 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3674/bus" dev="sda1" ino=15881 res=1 errno=0 02:29:02 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, 0x0, 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:29:02 executing program 1: [ 2193.798848][ T148] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration 02:29:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900ffffe000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:02 executing program 4: 02:29:02 executing program 5: 02:29:02 executing program 2: [ 2193.904367][T11099] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:29:02 executing program 5: [ 2193.952198][T11107] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:29:02 executing program 2: 02:29:02 executing program 1: 02:29:02 executing program 4: 02:29:02 executing program 5: [ 2194.126648][ T28] audit: type=1804 audit(1602037742.388:609): pid=11114 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3675/bus" dev="sda1" ino=16265 res=1 errno=0 02:29:02 executing program 4: [ 2194.325509][ T28] audit: type=1804 audit(1602037742.538:610): pid=11127 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3675/bus" dev="sda1" ino=16265 res=1 errno=0 02:29:02 executing program 2: 02:29:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900fffff000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:02 executing program 5: 02:29:02 executing program 1: 02:29:02 executing program 4: 02:29:02 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) [ 2194.646585][T11137] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:29:02 executing program 1: 02:29:02 executing program 4: 02:29:02 executing program 2: 02:29:03 executing program 5: [ 2194.747433][T11144] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:29:03 executing program 2: 02:29:03 executing program 4: 02:29:03 executing program 1: 02:29:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000000001000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:03 executing program 5: [ 2194.985658][ T28] audit: type=1804 audit(1602037743.248:611): pid=11165 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3676/bus" dev="sda1" ino=16384 res=1 errno=0 02:29:03 executing program 1: [ 2195.047054][T11171] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2195.185458][ T28] audit: type=1804 audit(1602037743.388:612): pid=11166 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3676/bus" dev="sda1" ino=16384 res=1 errno=0 [ 2195.225118][T11178] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:29:03 executing program 4: 02:29:03 executing program 5: 02:29:03 executing program 2: 02:29:03 executing program 4: 02:29:03 executing program 1: 02:29:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000000002000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:03 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:29:03 executing program 2: 02:29:03 executing program 5: 02:29:03 executing program 1: [ 2195.549803][ T3646] net_ratelimit: 209 callbacks suppressed [ 2195.549813][ T3646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2195.570341][T11202] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:29:03 executing program 4: [ 2195.672048][T11213] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2195.712136][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2195.722867][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:29:04 executing program 2: 02:29:04 executing program 1: 02:29:04 executing program 5: 02:29:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000000003000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:04 executing program 4: [ 2195.935965][T11220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:29:04 executing program 2: [ 2196.050869][T11220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2196.065061][T11220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:29:04 executing program 1: 02:29:04 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:29:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000000004000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:04 executing program 5: 02:29:04 executing program 4: 02:29:04 executing program 2: 02:29:04 executing program 1: 02:29:04 executing program 5: [ 2196.351615][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2196.362535][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:29:04 executing program 4: 02:29:04 executing program 2: [ 2196.440755][T22839] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration 02:29:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000000005000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:04 executing program 1: [ 2196.591215][ T3646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:29:04 executing program 5: [ 2196.674074][T11271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2196.780026][T11271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2196.829893][T25033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:29:05 executing program 2: 02:29:05 executing program 4: 02:29:05 executing program 1: 02:29:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000000006000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:05 executing program 5: 02:29:05 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:29:05 executing program 1: 02:29:05 executing program 2: syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x227, 0x20202) 02:29:05 executing program 5: getrusage(0x797438f8f10c176, 0x0) 02:29:05 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000001680)={&(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000001500)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f0000001800)=ANY=[], 0x128}, 0x0) 02:29:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000000106000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:05 executing program 1: getrusage(0x0, &(0x7f0000000200)) [ 2197.328469][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 2197.328486][ T28] audit: type=1804 audit(1602037745.588:617): pid=11334 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3679/bus" dev="sda1" ino=16314 res=1 errno=0 02:29:05 executing program 5: ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(0xffffffffffffffff, 0xc0984124, &(0x7f0000000080)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) 02:29:05 executing program 4: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001540)='/dev/dlm-control\x00', 0x0, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000001580)='net_prio.ifpriomap\x00', 0x2, 0x0) [ 2197.587321][ T28] audit: type=1804 audit(1602037745.798:618): pid=11341 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3679/bus" dev="sda1" ino=16314 res=1 errno=0 02:29:05 executing program 1: openat$random(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x333c40, 0x0) 02:29:06 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x246000) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000040)={{0x9, 0x20}, {0x9, 0x80}, 0xfffffffd, 0x2, 0x1}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000100)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r1, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={0x0}}, 0x0) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vsock\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000014b40)={0x0, 0x7, &(0x7f0000000440)=@raw=[@map={0x18, 0xa, 0x1, 0x0, r2}, @exit, @map={0x18, 0x9}, @ldst={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff0}, @func], &(0x7f00000004c0)='GPL\x00', 0x3ff, 0x58, &(0x7f0000000500)=""/88, 0x41000, 0x5, [], 0x0, 0x3, 0xffffffffffffffff, 0x8, &(0x7f0000014ac0)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000014b00)={0x1, 0xf, 0x6, 0x3}, 0x10}, 0x78) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000014c80)='/proc/thread-self\x00', 0x101000, 0x0) 02:29:06 executing program 5: syz_open_dev$vcsu(&(0x7f0000001140)='/dev/vcsu#\x00', 0x100, 0x44000) 02:29:06 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:29:06 executing program 5: getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) 02:29:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000000007000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:06 executing program 4: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/vsock\x00', 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x227c, 0x0) 02:29:06 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0285628, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "15e12073"}, 0x0, 0x0, @fd}) 02:29:06 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x2d02, 0x0) write$P9_RSYMLINK(r0, 0x0, 0x0) [ 2198.017730][T11384] Unknown ioctl 8828 02:29:06 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)) 02:29:06 executing program 4: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000140)) 02:29:06 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x5, 0x6, 0x201}, 0x14}}, 0x0) 02:29:06 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000280)={'erspan0\x00', 0x0}) 02:29:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000000008000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:06 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0xd, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "15e12073"}, 0x0, 0x0, @fd}) [ 2198.321873][ T28] audit: type=1804 audit(1602037746.568:619): pid=11414 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3680/bus" dev="sda1" ino=16309 res=1 errno=0 [ 2198.404502][T11422] nla_validate_range_unsigned: 12 callbacks suppressed [ 2198.404514][T11422] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2198.555468][ T28] audit: type=1804 audit(1602037746.718:620): pid=11420 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3680/bus" dev="sda1" ino=16309 res=1 errno=0 [ 2198.595109][T11430] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:29:06 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvmmsg(r0, &(0x7f0000005900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 02:29:06 executing program 2: perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40828, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40888}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 02:29:06 executing program 1: r0 = getpid() tgkill(0xffffffffffffffff, r0, 0x0) 02:29:06 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000640)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000006c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000680)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000080)={0x1, 0x10, 0xfa00, {0x0, r2}}, 0x18) 02:29:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000000009000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:07 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:29:07 executing program 1: openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x1, 0x0) 02:29:07 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x5, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 02:29:07 executing program 5: write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, 0x0, 0x0) [ 2198.822280][T11454] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2198.899753][T11467] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:29:07 executing program 1: syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x0, 0x0) 02:29:07 executing program 2: socketpair(0x25, 0x1, 0x4, &(0x7f0000000080)) [ 2199.057153][ T28] audit: type=1804 audit(1602037747.318:621): pid=11474 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3681/bus" dev="sda1" ino=16294 res=1 errno=0 02:29:07 executing program 5: syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x20, 0x6842) [ 2199.217722][ T28] audit: type=1804 audit(1602037747.428:622): pid=11489 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3681/bus" dev="sda1" ino=16294 res=1 errno=0 02:29:07 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0405610, &(0x7f0000000180)={0xc, 0x0, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "15e12073"}, 0x0, 0x0, @fd}) 02:29:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000a000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:07 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) 02:29:07 executing program 2: msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000001140)=""/66) 02:29:07 executing program 5: socket(0x1d, 0x4, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) 02:29:07 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(0x0, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) [ 2199.549897][ T148] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2199.661164][T11509] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:29:07 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f00000000c0)={0x0, 0x0, 0x0}) [ 2199.707769][T11510] can: request_module (can-proto-0) failed. [ 2199.732722][ T28] audit: type=1804 audit(1602037747.998:623): pid=11515 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3682/bus" dev="sda1" ino=16003 res=1 errno=0 02:29:08 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, 0x0) [ 2199.743309][T11510] can: request_module (can-proto-0) failed. 02:29:08 executing program 4: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4800) read$proc_mixer(r0, &(0x7f00000000c0)=""/94, 0x5e) [ 2199.818565][T11524] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2199.835709][ T28] audit: type=1804 audit(1602037748.098:624): pid=11515 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3682/bus" dev="sda1" ino=16003 res=1 errno=0 02:29:08 executing program 5: getrusage(0x0, &(0x7f0000000080)) 02:29:08 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 02:29:08 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(0x0, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:29:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000b000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:08 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x13}, 0x40) 02:29:08 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000100)) 02:29:08 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x101801, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000100)=0x5) 02:29:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000001380)={&(0x7f0000001280), 0x8, &(0x7f0000001340)={0x0}}, 0x0) [ 2200.130264][T11556] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:29:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={0x0}}, 0xf) [ 2200.200106][ T28] audit: type=1804 audit(1602037748.468:625): pid=11563 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3683/bus" dev="sda1" ino=15884 res=1 errno=0 [ 2200.205884][T11567] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:29:08 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) bind(r0, &(0x7f0000001200)=@l2, 0x80) 02:29:08 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(0x0, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:29:08 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmmsg$inet(r0, &(0x7f000000cd80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003680)=[@ip_ttl={{0x14}}], 0x18}}], 0x1, 0x4000800) [ 2200.320680][ T28] audit: type=1804 audit(1602037748.528:626): pid=11574 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3683/bus" dev="sda1" ino=15884 res=1 errno=0 02:29:08 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000070c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_INFO(r0, 0x2, 0x0) 02:29:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000e000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:08 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) connect$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x8e) 02:29:08 executing program 5: syz_open_dev$vcsu(&(0x7f00000002c0)='/dev/vcsu#\x00', 0x8244, 0x0) 02:29:08 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x246000) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, 0x0) [ 2200.560876][T11599] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:29:08 executing program 2: openat$procfs(0xffffffffffffff9c, &(0x7f00000070c0)='/proc/vmallocinfo\x00', 0x0, 0x0) 02:29:08 executing program 4: pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100), 0x8}) [ 2200.640735][T11609] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:29:09 executing program 5: r0 = socket(0x23, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={0x0}}, 0x0) 02:29:09 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:29:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000000f000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:09 executing program 1: r0 = socket$phonet(0x23, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0) 02:29:09 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r0, 0x0, 0x48804) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000000109010100000000000000000200000508000640000000010800034000000003080005420000001708090000000000030800000000000015b2eea1ebd4756db76aa03d5080eb4c61c004c883cb425c6ada520542d5846d0571"], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x20000000) [ 2200.751520][ T3646] net_ratelimit: 29 callbacks suppressed [ 2200.751531][ T3646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:29:09 executing program 5: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) 02:29:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2200.906693][T11645] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2200.969334][T11662] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 02:29:09 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) socket$inet_udp(0x2, 0x2, 0x0) clone(0x2200, &(0x7f0000000180)="a43c71950db546288c86e8474924bedfae00e784cacdd5e221a618ff223ab94a5554274a54718d8b4019580f2f45dd5fd871bc06328a24286a220cb83c3d6c1c788cba0bcd757b85b1c810640584b9a52c7c4e9f7342ff0f77f51195944625a1af25d8bef9624428cadbf520ec70fe7ec412bf488fe35a19de057f8a5e0c56212c5137edd3f67cd654c8e7b22f7dbf6ab0614fd6c75cd8646c03c27a7e638f65f3172967748eaf4a5727ac2f1764e448a1026da8e78946d312d8f25662ed6664499652327cbb52f7bca7b37d79eff93d7b8e97c71cc73862e2e5ad9e37d2a0c1cd0c8a1841fb571ebd97eea38e9da71bdf505e", &(0x7f0000000080), &(0x7f00000000c0), 0x0) pipe2(&(0x7f0000000000), 0x80000) 02:29:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000000012000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:09 executing program 2: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/card1/oss_mixer\x00', 0x0, 0x0) read$proc_mixer(r0, 0x0, 0x0) 02:29:09 executing program 1: openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/card2/oss_mixer\x00', 0x391b80, 0x0) [ 2201.470123][ T148] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2201.480897][ T148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:29:09 executing program 1: socketpair(0x10, 0x0, 0x0, &(0x7f0000000140)) 02:29:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000000118000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:09 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000000)) 02:29:09 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:29:09 executing program 2: keyctl$dh_compute(0x17, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={'sha1_mb\x00'}}) 02:29:09 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0x5452, &(0x7f00000000c0)={0x0}) [ 2201.549404][ T148] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2201.560040][ T148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:29:10 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x4, 0x0, 0x4) 02:29:10 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x5}]}) 02:29:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000000020000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) [ 2201.789259][ T3646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:29:10 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000070c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_INFO(r0, 0xc0189436, 0x0) [ 2201.841721][T11718] could not allocate digest TFM handle sha1_mb 02:29:10 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RSTATu(r0, &(0x7f0000000040)={0x83, 0x7d, 0x0, {{0x0, 0x55, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x2, ')+', 0x19, '/proc/asound/seq/clients\x00', 0x6, ')\xbc)${+', 0x1, '*'}, 0x19, '/proc/asound/seq/clients\x00', 0xffffffffffffffff, 0xee00}}, 0x83) 02:29:10 executing program 5: r0 = socket(0x23, 0x2, 0x0) getpeername$packet(r0, 0x0, &(0x7f0000000140)) [ 2201.897174][T11718] could not allocate digest TFM handle sha1_mb 02:29:10 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:29:10 executing program 2: socket$inet6_sctp(0xa, 0x5, 0x84) select(0x40, &(0x7f0000000040), &(0x7f0000000080)={0x9}, 0x0, 0x0) 02:29:10 executing program 4: syz_emit_ethernet(0x86, &(0x7f0000000140)={@remote, @empty, @val={@void}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "19bdc8", 0x4c, 0x4, 0x0, @private2, @local, {[@fragment={0xbe}]}}}}}, 0x0) 02:29:10 executing program 1: socket(0x29, 0x2, 0x77e25c05) 02:29:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="c4"], 0x1c}}, 0x0) [ 2202.109771][T27517] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration 02:29:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000000222000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:10 executing program 2: syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x8040) 02:29:10 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000640)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000006c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000680)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000001800)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 02:29:10 executing program 1: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@remote, @empty, @val={@void, {0x8906}}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "19bdc8", 0x44, 0x2f, 0x0, @private2, @local}}}}, 0x0) 02:29:10 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmmsg$inet(r0, 0x0, 0x0, 0x0) 02:29:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016e37000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:10 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000640)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000006c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000680)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000004c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000700), r1}}, 0x18) [ 2202.828889][ T3646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:29:11 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, 0x0, 0x5f5e0ff}, 0x20) 02:29:11 executing program 2: syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) 02:29:11 executing program 5: socket(0x0, 0x46a03fc698a622da, 0x0) 02:29:11 executing program 4: perf_event_open$cgroup(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) 02:29:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016e38000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:11 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) [ 2202.911850][T25033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:29:11 executing program 2: socketpair(0x8, 0x0, 0x0, &(0x7f00000001c0)) 02:29:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000600)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000700)={&(0x7f00000005c0), 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x38, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x38}}, 0x0) 02:29:11 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0x40045613, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "15e12073"}, 0x0, 0x0, @fd}) 02:29:11 executing program 4: r0 = add_key$user(&(0x7f0000000500)='user\x00', &(0x7f0000000540)={'syz', 0x2}, &(0x7f0000000580)="c3", 0x1, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f00000001c0)={0x0, r0}, 0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={'rmd256-generic\x00'}}) 02:29:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016e39000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:11 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc0585611, &(0x7f00000001c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "e794e42a"}, 0x0, 0x0, @planes=&(0x7f0000000080)={0x0, 0x0, @fd}}) [ 2203.193047][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 2203.193062][ T28] audit: type=1804 audit(1602037751.458:635): pid=11901 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3688/bus" dev="sda1" ino=15784 res=1 errno=0 02:29:11 executing program 5: socket$inet6(0xa, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000003f80)='fou\x00') 02:29:11 executing program 4: syz_emit_ethernet(0xfc0, &(0x7f0000000040)={@dev, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "0a1722", 0xf8a, 0x2f, 0x0, @local, @local, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, [], 0x0, 0x0}]}], {{}, {}, {}, {}, {}, {0x8, 0x6558, 0x0, "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"}}}}}}}, 0x0) [ 2203.333073][ T28] audit: type=1804 audit(1602037751.548:636): pid=11908 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3688/bus" dev="sda1" ino=15784 res=1 errno=0 02:29:11 executing program 1: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000014c80)='/proc/thread-self\x00', 0x0, 0x0) 02:29:11 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:29:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016e3a000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:11 executing program 2: r0 = socket(0x23, 0x2, 0x0) recvmsg$can_bcm(r0, &(0x7f0000001480)={0x0, 0x0, 0x0}, 0x100) 02:29:11 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000070c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_INFO(r0, 0x40086602, 0x0) 02:29:11 executing program 1: r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x3, 0x0, 0x0, 0xee01, 0xee00}}) 02:29:11 executing program 2: r0 = socket(0x23, 0x2, 0x0) accept$packet(r0, 0x0, 0x0) [ 2203.613174][T11948] nla_validate_range_unsigned: 16 callbacks suppressed [ 2203.613185][T11948] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2203.667447][ T28] audit: type=1804 audit(1602037751.928:637): pid=11953 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3689/bus" dev="sda1" ino=16287 res=1 errno=0 02:29:12 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000070c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_INFO(r0, 0x4020940d, 0x0) [ 2203.756207][T11964] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2203.767685][ T28] audit: type=1804 audit(1602037752.028:638): pid=11958 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3689/bus" dev="sda1" ino=16287 res=1 errno=0 02:29:12 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) 02:29:12 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x9, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "15e12073"}, 0x0, 0x0, @fd}) 02:29:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016e3b000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) [ 2203.869269][T32026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:29:12 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000001680)={&(0x7f0000000040)={0xa, 0x4e20, 0x0, @private2, 0x8}, 0x1c, &(0x7f0000001500)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f0000001800)=ANY=[@ANYBLOB="1400000000000000290000003e0000001f0000000000000028000000000049"], 0x128}, 0x0) 02:29:12 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:29:12 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$can_raw(r0, &(0x7f0000001640), 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) [ 2203.984259][T11987] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:29:12 executing program 1: syz_genetlink_get_family_id$net_dm(&(0x7f0000000100)='NET_DM\x00') 02:29:12 executing program 2: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000bc0)={&(0x7f0000000b80)='./file0\x00'}, 0x10) 02:29:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={0x0}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) [ 2204.101512][T12001] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2204.152432][ T28] audit: type=1804 audit(1602037752.418:639): pid=12010 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3690/bus" dev="sda1" ino=16384 res=1 errno=0 02:29:12 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000040)) 02:29:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000001380)={&(0x7f0000001280)={0x2}, 0xc, &(0x7f0000001340)={0x0}}, 0x0) 02:29:12 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0x7, 0x0, 0x0, 0x0, 0xb, 0x1}, 0x40) 02:29:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016e3c000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) [ 2204.299953][ T28] audit: type=1804 audit(1602037752.508:640): pid=12015 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3690/bus" dev="sda1" ino=16384 res=1 errno=0 02:29:12 executing program 4: ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self\x00', 0x0, 0x0) syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/vsock\x00', 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x227c, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 02:29:12 executing program 5: mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz0\x00', 0x1ff) 02:29:12 executing program 1: select(0x0, 0x0, 0x0, &(0x7f0000000400), &(0x7f0000000440)={0x0, 0x2710}) [ 2204.507500][T12036] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2204.555394][T12039] Unknown ioctl 8828 [ 2204.576179][T12046] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2204.624035][T12052] Unknown ioctl 8828 02:29:13 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:29:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016e3d000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) prctl$PR_GET_FPEXC(0xb, 0x0) rt_sigsuspend(&(0x7f0000000280), 0x8) syz_genetlink_get_family_id$wireguard(&(0x7f0000000300)='wireguard\x00') 02:29:13 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000200), 0xc) 02:29:13 executing program 4: r0 = socket(0x23, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x4c}, 0x1, 0x0, 0xeaffffff}, 0x0) 02:29:13 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r0}) [ 2204.908697][T32026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2204.915661][T12071] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:29:13 executing program 1: io_setup(0x3, &(0x7f0000000280)) 02:29:13 executing program 4: openat$fb0(0xffffffffffffff9c, &(0x7f0000000240)='/dev/fb0\x00', 0x0, 0x0) 02:29:13 executing program 2: openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/vmstat\x00', 0x0, 0x0) [ 2205.001910][T12087] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2205.053932][ T28] audit: type=1804 audit(1602037753.319:641): pid=12088 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3691/bus" dev="sda1" ino=16312 res=1 errno=0 02:29:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016e3e000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:13 executing program 4: syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1, 0x0) [ 2205.188907][ T28] audit: type=1804 audit(1602037753.439:642): pid=12104 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3691/bus" dev="sda1" ino=16312 res=1 errno=0 02:29:13 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2205.262996][T12107] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2205.309861][ T148] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration 02:29:13 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:29:13 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000070c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_INFO(r0, 0x81204101, 0x0) [ 2205.372169][T12115] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2205.599362][ T28] audit: type=1804 audit(1602037753.869:643): pid=12137 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3692/bus" dev="sda1" ino=16319 res=1 errno=0 [ 2205.709775][ T28] audit: type=1804 audit(1602037753.979:644): pid=12139 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3692/bus" dev="sda1" ino=16319 res=1 errno=0 02:29:14 executing program 5: socket(0x10, 0x3, 0x40000000) 02:29:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000003f000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:14 executing program 2: openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/adsp1\x00', 0x20602, 0x0) 02:29:14 executing program 1: syz_emit_ethernet(0xe81, &(0x7f0000000040)={@dev, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "0a1722", 0xe4b, 0x2f, 0x0, @local, @local, {[@routing], {{}, {}, {}, {}, {}, {0x8, 0x6558, 0x0, "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"}}}}}}}, 0x0) 02:29:14 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0205649, &(0x7f0000000180)={0x1000000, 0x0, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "15e12073"}, 0x0, 0x0, @fd}) 02:29:14 executing program 1: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000200)=0xe02fd3f) [ 2205.949632][ T3646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2205.961825][ T8284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:29:14 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) write$tun(0xffffffffffffffff, &(0x7f0000000180)={@void, @val={0x1, 0x4, 0x0, 0xb3, 0x3, 0x8000}, @ipv4=@tipc={{0x5, 0x4, 0x1, 0x9, 0x2d, 0x67, 0x0, 0x0, 0x6, 0x0, @remote}, @payload_conn={{{0x19, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x2, 0x401, 0x0, 0x2, 0xe, 0x2, 0x0, 0x2b, 0x8000, 0x4, 0x4e23}}, [0x0]}}}, 0x37) r1 = getpid() socket(0xf, 0x0, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000600)='l2tp\x00') sched_rr_get_interval(r1, &(0x7f00000002c0)) getsockopt$packet_buf(r0, 0x107, 0x2, &(0x7f00000000c0)=""/138, 0x0) 02:29:14 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:29:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016e3f000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:14 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x51) 02:29:14 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) msgget(0x0, 0x0) msgctl$MSG_INFO(0x0, 0xc, 0x0) r1 = syz_open_dev$sndpcmc(0x0, 0x0, 0x2300) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r1, 0x4112, 0x0) syz_open_dev$sndpcmc(&(0x7f0000001200)='/dev/snd/pcmC#D#c\x00', 0x9, 0x100) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000005080)={'wg1\x00', 0x0}) sendmmsg$inet(r0, &(0x7f000000cd80)=[{{0x0, 0x0, &(0x7f0000003600)=[{&(0x7f0000001240)="2ce3c25bddacb532", 0x8}, {&(0x7f0000001280)="b2529405de3d6256c0e83ca471dce3002db43ea5fdf1f457bb1d3980310d4a2e5cb35c5669b91729c15a0ab752384e328cd22d12759cefe2bcb549f2afdbc73f40d553fe49aa9e0117b671b816b7db77d9c4f15586a5e3f34951dd64767ef3e3d24d4769b79f11f67f9bb6f155fcf157204f538d36346ebd85f577a60db21d3d5e6c1bbf04563da3d54a58f91ce4031e9744c1cc6867e37ee47688b33ceb03b198996f68baf355799d1ec521b4d6b7df649909d19cb5a944667fdc8d5d9dcb8f2a99b08cbd7d682d9d0ad81bc8c3d38dd2363dd66870b4be1ee08fd7ef5711dee8037049", 0xe4}, {&(0x7f0000001380)="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", 0x1000}, {&(0x7f0000002380)="b7de7027276e5b4b124eb5924236f92bafcc5cb91555743afb8ece43dd1822a264e5b6fbfd8882ac85cde6ec78c9bce0448d0fac50cdabc14d3501554a02aa5b7f34f98b2b48b0cf1ff02226f4da9d367e7138c52053c9bc40da8a423c72ee748449d977e2a1", 0x66}, {&(0x7f0000002400)="57f2a60771176463d13e5626b9f238898e8bfdba930ee7b28ff95a5971788b69b04047ae48a939fdee727756026d674dc6740c4a8a4cd6f1c6fc9e1a37cd692d692670107248269cff5ce7b8250dc1f661ae4c0e732c8cf046547b28bd759ccacd39998fbfa153fd2c2b8544f3c9bba28ad04f4b0a93a50657378486cad3b6a1cd9c37f2ffaaf54358870bb59e008c322d67071955fa80b5e456a40694732711d9685b4b40e9a7a30be271110fdbab158e37dbe495dc08db2414df5b3136037645d93bd341fa28c021c8ae4e585553470d7af029db7bca9261529c8b2429511b03d494410b91872e7525e751613aa2f505b517fa26e7ab0dc99010cdae6f3d8e43b95c8cc64c5379b260c5138ca1dc0368d11413c59e332db145c0e7db6d67c90e41056b80f626480ccade780675223ec783a739bca9ba8ef250f365549d1aea451a672c6f4ea8a5b0c40fa7225701a33a56d3a654677c0707117c34f112b4a9c6e5907dde1a7b27cb5450e86a302a4780e7f6d6990409a67d0e1c34c3726a14af7d33cf5ea68dbf423cab529bf96bfe7f2ad6f28b7afee373d2ac990cbd0005bcf7e17bf66735815e7556508ea88d32f498bbdaee3275bf75b952b226b8aca5f11453c9133f2265ee3e4aae6477a0dba47bdf1038e1dd8da5e0c9c60d25c6faf284bd7e5cd04c1813ea5b4cc88565624f74727ba07248659f9c4c55acad4cf0aa97f84ef35296786a82a56642e96bcb5c879774af69b13930ae5d4d953926a9e95449ddcfa5e3c13d5e958e939cba9ccb638b0816db765a4197f62629d6951360ee7782d6f2272cc7b871462e11ddf4748756d91be4d2f27f28a6b0c80f305896e15d45bdb8ca4e455d373627299c4334c3a0248cc6cd0b2126aec160f59adb87c8963e80d201f818f5641ea22bc03089bbc8be1c349853bce056e21f0426d524f03b493ab216fd3f5a8ad1a6ceb462b3090554a782577bd6d99d14c52a725b6b8d287b7b4130a1eafafd467ce15a3676415f5e5db945799d73c515821a186d78dc6edebb2d253514b09568c79958f461f99d1378dc85306fb8f0f0bff0963ecbabbfb3644816534810ad5b3157c3db28857c8d2bfb2ebb8c4aded79d455fb0a5985ad96ed72ad302dffcb6a2e9803423d97d25589a374413d9e9b9b8e5b8bd715fa497999d0aeb7f28e85861cbcb9bc878e89e698100f1bcd8861fb66b9f21add1131d266f5d8553453b3351a513982aaaf423e4f1e57c93054513a38ef3aa853a2e201ab20ed9d5ff9fb4378233615e2f0152e83b61f4490c5bb9bbbc15054af0e8370dc4da4817cb88783a20a8612bf8968fb0b6b91d0fbc8f7be45b777a484387e46e23aa23d026c10845f072f2426264c18085e8adaf072fc0b8e6f609b3aa10be04ea7987b548c5600fee1898984ecefa58b9119807c049a225c89e15eb4274947aad5ee4a6c5087f984d228ad78685ade6d9078b0c9bc3d313ddfdb4ef7b4f90cc4d601cfad7f8424e3e20042c84a893bb4b65cfb3cba609dc69e372b8e158d9f5a4b24a2f6f26b13f1d480732e4da450ae103aa87cb7e9405aebc7533c1c7dbf000fa6a73623fc8082137fca84545c387d7a88e33b192d16c784efcec7487c4c8c7b322da2893d9b05e2abe0d104345fc900c4f70cc26c88acc95944fd6b2d745106829adba528acb99b08a8ca1ca031be0b75a70be7b51886a793e43893d54477b04fe7b47f2b6a5819eac3ee86813aa3b2ecb497ee821fddfcbf9bad8a0e594817d01a31425d2ec78177fc57c692cf39c3e35680b2be46536c33d89d39809ac6fb751f39292f070d92b521ef1971c17d22934bd44d9cea90ba88e18ff0100ef167bf2860ae13fb56e1374f54fd9ac4912c6fd90bfec7b5d67ab98e09b6364c0e181798048336da2345e456c56f4d0b67ad522031f5fe5a2d55b13b3f1973f8d20354bba3427afecc889e4faaf4ff2d61fbb86b45139dc0d68d2dc94031eb49bb1aaaa6d306735baecac72d66a99e05e000bc6fcc4e14bbe681c9c1eb2a8dde2067b8c785924879455685e0c37751b594501240133da09f56abb5e5ba0bef07279650a9facf1cdf69b02a4e837ac21462df89803c15b9644982b23e66d0982c5b81504cbe8331fa431402a29bc2b8920f676c60dfecee18e017d6170adb376f1cde45501f18465050d97ef351f6249c0668cc70d820e774be7547396a5d6053fc1f5fa5b7f4c1ebe1bfeebf07cc18186d7c32bf9b5cb9a26ab78c71f060ddd97c3997c465520fb69750044e7af95bc1dd2798939c9ea5936414a4988e0eb6f7e155f7be70b9ff733c4603299399f7d1994ab42e77e083b8cea7d79604a3f1c3f373cb65dad94881a2e6cff613d96daff00815d761339449f9e5f65542e448e85114b3a352276216806704e80f9f7b3bfe5b00358f6ee293651ca9b1fd413661c53af748740fbe22a2d6764a4a06346c71b0799bb327d5d464597ef1870fc75e9f950d3c0979a0bf46f5739342ab20513d20885d0f2b1bdec39c59001db937099881f24805f88997b3f8b0a033ab1ce56a82855137c430dd07e4bdb787374aac4c464080e0038b3f8e994925cfeb980416e8d3e7943a149fd8a15b8c49161550303d8663f1e87b7133d2b3d438832007ad5f80288713a85312db389177fb8422bd5236d1bcbba5b336193683b1ffd0241a7491dc0c1da4802dc5278329b3a8f939586314cc8bdbda9a05e73c839f6892e0635cc754a28f1efc6c64c9ac4a157bb817901a6aa81dc79fde3ccbc49fefa095a334e5a950818f6c31a2340173984d3f4316b387fa6daf2bf35c54b6ec6ea85d8da64c6c11d094afd0afc67c354fef772c575c92368374af3b86d59b1505b75f4bf4c97a2e25973110b75ebdd07940c8f5e80def47a45125497d2c777f7edb59aad20575b687e04369ee6aac22b2447bcb3c701054a3aa9d32234132595bad7bd5d68c96a967d4b230d7a0065807f3956725927ac63467b3eb53e75ef1a824b7ac9e5650e0016b8919f9cebf7fe24ce5f2af9f40dd73f92c91ce8a97ac878a9b89c31ef2a42054387d4290e11253cc337a2a49c0ce0996400c743f5f31dc06757c07fe71762e46922687d79d6178d4cc7837b2295469267f00aaefb3081bf29350ab3cb9103b71ec3476caca7b87c1068d61b5afa8c3bdd57f6b35de09552197f3618e941bb33c56f3896108a8a0621c18e38115a493837b6fc6b3afe9d54fe78d03b88036707d6aa580c9c9d3fd66cc02ff56e0dc34b60e45f8b6ee390c67abc92b777cc1eb096ddf0b7a6dbdd1340650f3461533d93ab6b9a42870d08f33f4f556ffa7e63908041c23ba40f9a7eb327901dff63758beca25d41a4b26a935241dc434bd8694f7f40ceb71a0860b30a6a9e4a45eda77b56439ba2d79cc555ccf6b43e76371aa7bedda5945c1d258d3d0dc0ab3128dd3befd71a3127c89267ab51751ce83e56de237ab98bd4574820c33fbe009e6fce7621955fac06abd7926245ca0bed5c1a78bf1a79222db373ac944ca2267f85ec3619b12c828baaa9fa24598596dd34428f1730d0284f976f28e8a0b183e1a7ff65d323e301d00714b80d578d03823a4b39fefe03972fdc5558d5787976e50ae0e004ba7615559a984930a00f8a8b7625ba0f7a08a0a3a86863bbab28cb361ea71170cca33b256dc562eb1bc9d5f67f5c8890b5680206db0bff6505c41f9262b6ae8338af1cecf56a1073737427bfe2bce99cf818481eac477722b0c2bb37c61d7ca41713962e11f6154eb88bf5a6ae6babb2f42a456402c10d1180beb544c171c37be111b8baf1d8fd4a9a768915c8a5295efc521a96a847ccbd1daa9dc84b84d11dd9b92e7beed9949b8d25230e9f858707c0324aa304d0a6f18d3fbe18c49cad42db03239cf62c1c64307d9250c28b30beeddb3b94b0e66d31c7fe22a3bdcda790df73c61b6c57d780a81f989a448b68873ca15cd8e794618090d3b098c9ccb22909acffc7b09c7e8de02b4408e9c2fea44b2623bc0e17a8b107bb698418b20312052e658038fb81e3f2c4120cf2516c81a862b3c6b074e7247a53db303fb7943f8d20a200a3300a7835404d22fa698c58dc454bba2ccbd7d1a269e234832d1ccdfc83872cae72c134b5683a885676b45994cfba710b25377b5eeded48e34217174d37b1536cf6005c67efb834a752f1053e1cb6c7556f8c24dab775ec8a5392ccbc3df7cd013c990d9a60f675329b0412eb90d337dba2e4ff39d86b10b51bdccba26309e769599c9da5cbb6f5336c5a8ae7705f40c283692a25dbafba2efd7a07d81f0303271791bea7e3e761f99cf121496b471d648d1a173ea9be0869baadfee7e8a708b079f7a74a9cc00cb3418ccda32bdab33b5d30cb3006abcaf51fdbb0d0ceb1cd66083b02379e999ec7a7c933e22e7dfcf061e3219475a5b90b57259064aa32bada68823eb27dd6167b79b6934224507f55fc0682f2ac265703db6d46cff19be55375fc77e02df4595a3d3c97d69c272f94122e6d5c809f592f67e680fdcff528366e11524534e36ca56bd3cc804f3d8d5f6c5c052186821aeb55d52ab45a09ab3265e20099027757a973f08ae5045ca314785f4ad05598bc93ae3f1c2581bee52df1f19c8a2e7e1a7c61cdd0f5e8c70ca8766b1d5c5b107767f7e73c9c9f2b5119bfce03a0aef17760575c7759f3b5ac4af3d5af6944ab32e5cab9cada78e636f7f928a83c62b75e8ef0c16d30318bacd8566a85e709b585a9608467d0c6c8d0df57c26149c2576d5525dec98b0b6262b4d43a03015a41576b6f37a9a7a84ae953c7e28c412d0fe94574df6132c0821a4f3ce9121262169fe32ea2bf3f42ec011bd48ae6ae37b50f19017fb96df2aea9fdfb27043349b20c0b5e5042c53b1d602a15f520316e8d91aa9ce88fe3b096a59d1d928ba6216423243aab60ed2250e1bd69e592466ea97c8477aeb26fff153576093685697b36fb85c641ec0e6c310a16d6ac15b20bddee334708d4ebe0f3c90a656d4f8a7877625c93791a08a63c3402a9d3d20c148fb7c959fc2558536780c1a6e4a8bb169b7bcbf22418b450c0b7e8e4016f105fb9ddcdeadca55badb0c2d8dbf86181a8736d796abb64d13a19f40675f310519dffe8f103eb6bd830078a544882e73df97d856acf2cb6e88f0e8a7a4592e1e6e8bb3bf35d908114eec6ae766edf2135003579a4f273c649dac8329447e333afd36fcae16ffc45eb1af5285e4ba0bbed5901aa2ff5b14f871ebf14b238fe5ea2cce77ab4d591327042380ec10d378a95d72898e9cf2c4c39166b700e1f5c44097c37e09cdbcdee853da2a6dec3ecd73e6dc6ac57f2be7da30ae568ab738017b35ed59139c15d1789369bc51d4443099551640c561ac805a4e00829381cb7b2846de51dce2f60f96a46349ba15eaef4588e2f7a0d9f83b08061fe99e6a3a67daa326e45efbb7d091d10f3d42f482fd2c5a81b4d8c0d0602261993deb3ca788390ffc2f0ce473bb04d9946c26b71924f6b611566e0d940880b03822049224c22962e70deddc64785aa9d3b597d4ff5fc25911aa105ad286bfafa25bda79f171c83ec5ec3696660a3f8d486a089ffccca3d6458182a65d7cd0bb4ebd58020adea7d44c656cf0ebe3d5bea8173e8ec3cffb8e42453e9ec7e38dbba2c8cd6a39979b8a5c16d0cc8305e0dbc30bbadf7326ea6201c1a0f3e9b0d30723ebd7b68aa9b0ef37cdfadd6ab2b6f51b4e264d277b460666be1ef89042253a796c6db1364757823e30fa93ea9acb63a85", 0x1000}, {&(0x7f0000003400)="a85dd3e8900a58798f4d1cba28f10586f0f563020bb4f2bb52f2b0959775a21d290ff9e12df30b31a88c764e1b0aabdc5de1dda2974f9594e2f1e219e39e43201a02fb08621f834862435789cd486b3e449f64fa18dfbfddff98db728443c62dcb073932aa3bd101dffbd66a54233e7ebf055bdf6fe88be2528319abbcfe99a00098c4f759d82e24ca31de11c98d167d0f1d683c4d4a1c16d1affd133e3f1d0208eae3fbc93126fbc4a6cc6974fbb97bcd22e7741f18b0796e9227a269a2fab5c4ce79ed1e6560808e7a", 0xca}, {&(0x7f0000003500)="c502902be14215eafd8a0b848627259a9d091b2397f4109eacd55f26334a2f66661b62311a8148e01fb781bb74648bb558d4139dfa4da0bbccded58be3c221ab93c5a40fb1da0bc92de52567158bbe6106b5f25d2f6229ae62a6b139f6fd95fd42e92334dd6ece7366b5694931c21214384eefe5f33342afed695d9a86d2eb431cbafbd39e70e126304ee441cc8a8c246ea71a339d2e9475267f438d7ffada0c6ae76cab7539a77799f74e0bfc0cc93f846c6d5084ae772cfcf692e4799dac8970c81123909887e7281f69d517ca24d435ffa8cd7b7e7da32d245c9edcb37f33886169259e1953daa7f86d816e4407", 0xef}], 0x7, &(0x7f0000003680)=[@ip_ttl={{0x14, 0x0, 0x2, 0x10001}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5f}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @empty}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8000}}, @ip_retopts={{0x50, 0x0, 0x7, {[@noop, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x1c, 0x38, 0x3, 0xe, [{@loopback, 0x7}, {@empty, 0x1}, {@rand_addr=0x64010102, 0x3}]}, @timestamp={0x44, 0x1c, 0xbc, 0x0, 0x4, [0x0, 0x80, 0x2, 0x20, 0x0, 0x3e000000]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_retopts={{0xa0, 0x0, 0x7, {[@noop, @timestamp_addr={0x44, 0x44, 0x4a, 0x1, 0x5, [{@loopback, 0x1a2e}, {@local}, {@remote, 0x8}, {@multicast1, 0xd4f}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0x2}, {@private=0xa010100, 0x3}, {@dev={0xac, 0x14, 0x14, 0x3f}, 0x7}, {@loopback, 0xae}]}, @ra={0x94, 0x4}, @noop, @lsrr={0x83, 0x17, 0x58, [@rand_addr=0x64010102, @broadcast, @private=0xa010100, @rand_addr=0x64010101, @multicast1]}, @generic={0x88, 0x4, "4c8d"}, @timestamp={0x44, 0x1c, 0x10, 0x0, 0x6, [0x0, 0x9, 0x25fe5d25, 0x3, 0x80000000, 0x7]}, @noop, @timestamp={0x44, 0x8, 0x93, 0x0, 0x9, [0x6]}, @ra={0x94, 0x4, 0x1}]}}}], 0x190}}, {{&(0x7f0000003840)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000003cc0)=[{&(0x7f0000003880)="7cc18cdebb5f8527d8ae1793c4457a59dd23f866e4ab2ef0288eb0ad02e9aeb2fed2e3302eb8f6cd726ceb562ff51432b2502dd0a411f3bd1ce8b8331c52c872bf4e9bef191bc733d312d439d2bceeea72cace50ec14d19c935e6122da47bc8370d6322f1f2b5e56b2d79d05c865818400bf2af54fb24e37b9c607145aa6e076c6eb", 0x82}, {&(0x7f0000003940)="98a2ef545ca1aa6761a2aa06485d87fab4d37621181d9770c08f624afe20e133eb91faaa9dbb130ad5d3421d263dd04983aebd266c4d4c35c34f6b4147c10aa6ca10c556d702b4824264bb3c774ce5fbebee7d70af84120c42122e4c7343832628e3562e99ab75241209f8ddf546402f6ca9d92de6087dae441e1ff0fad15612bc81416db83d253cfd34d33de32f477158e0a2f37bfd69ea262f79ff79ed049c9e435e81401a", 0xa6}, {&(0x7f0000003a00)="3f4dc10c9a7840625197c04fc5774d42abe628d8289a50d7a97b8898c52793a9beec51c8aad440f6c40fe44b73e999ab5131c3222dbe0a77b0aaf56c4eacd63fa5d39ac12e5f42297b1fae43628467200c0884eb3dd4d3810fd5ea38f0fcad693d80af0f539faddcd7b782a40b29bbe305f912a1cb2726d5361e9ef5037e60c0eeb6a810c0b1b9b7b2257cf46b4df6", 0x8f}, {&(0x7f0000003ac0)="3cc492ae51f7b04f5693acc18f7df5c5029eaacc2d9b4460fd19d2b9e1f3a0357ecb23f5bc6443c7169bb1f41cc115e45237134b9c8326f7a078925db8cea9490e8ed5f3d6226e42f27973ff519a08c3b2d644fd8a249225bbc0d15aecdee5d1782a7099c6abc1cb35bad9c8", 0x6c}, {&(0x7f0000003b40)="8d97bdc6307e657f7cf8b5535c6d5894820c367be39bcad0c027792eae2d269777a21c880c8b5732679ef01ebcba8b2b3baddda66633c51e9cbefbde372f13042f55bc8911693968d939a519519584f2a3a57ef25d1739f6ee8c9a99927a7c53be59b2bbe1e5c73f2bbea26b0c4e75", 0x6f}, {&(0x7f0000003bc0)="4bfe6cbb750faac956dedee6a9ce78c4e0f2b73cf871ca7cff18ddc51d435e8cda40dfdc180d64fc1af933b277a2f42b67b9e1609f2f6a155da8066870f4bcb1c07a5064d08b99bc9fc3391a849ea67ddb521daa90db65e0343321b4ac235fe3721847362e7dd0955c8c9d328b11c6704b5e1f7684e094ae40c6a9c2a005490a74e0eac79beae8fdbe74549c509a2149c5106b84b528317ab9cce50a9c92bc00db41ec5861bbad16a32b776f775172785376ab4f45a3fda630f6dcf34c45887174739bc80c99a020db155bbaee5e", 0xce}], 0x6, &(0x7f0000003d40)=[@ip_tos_int={{0x14}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4010}}], 0x30}}, {{&(0x7f0000003d80)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10, &(0x7f0000005000)=[{&(0x7f0000003dc0)="b73d5111e6d425637c96814d0cb88f43c7c483c9ffb50d612dc5781f3f637f85f3f63d40778938db929af19efc2feda36736cbacee1c6af0de20bb3a82095838bca75f9e6153bf8027df693b8c62707519a205595570a5f0a3cb0460282c3c870d3ec7c87e1d207db148490379f2e0ae7a5ae4b294e1a362cb70a324d2fee953fac500a982bb27f74d8a02fab01727d436285b015527b86608e8b5400e860cfce701cf7756483d8619ed6cbbcdd0c87d3fcd2bade9a62081e4f31426dd6f7f595c26a800e34618c05f014e474dcebe87", 0xd0}, {&(0x7f0000003ec0)="2f4777fc0ff75eb671fdbf5b325560f1350239a0c0d7948f77eb", 0x1a}, {&(0x7f0000003f00)="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", 0x1000}, {&(0x7f0000004f00)="75139ab771b715d1e5b1971821824e016c39b8cfa0d314d91b8e185b2b2dd0b53679038a897f8611c1785bb7800abd2794cd50a682ea8556a8d9621ceb957df70a30b3c57767905b56c02f382d90b0ae14f8125dfef24250ba4100e36cfd1ea658dc6294176574d3c33d5e53d480d1f7c0c33ca03412c87fe26f6fd08286b3ec0e91f09d52f322", 0x87}, {&(0x7f0000004fc0)="9b65793210dc864890a3b9d2b8cc3252735e3e45e1ebc8e769e4ca4560a3f861c085d2b560a69eb8df1c1a", 0x2b}], 0x5, &(0x7f00000050c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x100}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @loopback}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@noop, @ra={0x94, 0x4, 0x1}, @noop, @noop, @ra={0x94, 0x4}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @broadcast, @empty}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x92}}], 0xc0}}, {{&(0x7f0000005180)={0x2, 0x4e24, @private=0xa010100}, 0x10, &(0x7f0000006640)=[{&(0x7f00000051c0)="1d765d71688d9147b0ad83683a5ced8bbc038b09cb99d7c9ffd937652f27dbc15e1ac3c522506ed125a0e07a8d308b0fc990d17bb11ceefc061e72b8a2d1a4696b2f4ed51c18e6024946c5ab3e2f312dd4b428c0e1f8bdbb78ab57e8a46980ddc1712b662407a5790d419f27f6ee1546512441c6c6a5a99c97f90ac1453b16203ad6d0565520180b7105634fb27152749a64fbb37feaf889fcd919c4898e2d3a731753dd09d4a71b5ec3b40aadf922422dd2714af7244c250208d3f467f915a193dc62c11d1a16a2b2973a528b4595a94a111e0b3d1a665bae753d", 0xdb}, {&(0x7f00000052c0)="1cec9f4acd0daf898a28fd8cbb1ab8ef724f348277117a787b255de26bc7d1e993565ed4a8d67f32024d9311c4d0e4eef4df990dc248d36bd321fbff3f3bd385fcbb6b193e00c743f4a636bba791cb940093c7f348d17ce04d826025f4900d18a59faa800188918302a0941e40f406a43ede213bd021e9f633751ba471f27cf466aa315f3ea746f3b93616302c61a5cbfe4d2d68f415eb7a", 0x98}, {&(0x7f0000005380)="292c34a4edf945fa179ba95722fb69cbd0269b72f44f0f3397d4c398a6da5a0b5571606e58c92ed62f7c612853ad36e84fae9a96804ff077134b66a588b6168b2f463abe9908b333cb25646d9b1d590022f5ff90cc7347b27062aa51c1d3e95a7eca8cc5ea84db8a36d9067421e4acbb526e9e5d586ad14c46e886eccba4f41a7bdaf320e41cf7dfd9c04e57e8feff81fa313b7da517cdbd2803b92e052d1a55010160cd5eb536d8a2a990f3a78c903b5d12fb5f22a4b7583a5f51355932854052288c962850d61c6327437a154a16a75cfabed95c9045a999a36c35b1cd88e0a710777d4e7f5b547fad38ae7b3ee4229f0cac4e6a7f22aebc6809401dbdb80f4e955b88808d5d67f02d16665a4cd51ebca4b96530fdc2d6cb934dc5451f01883d88c96d175dbb3e816df1db7ea923a0d100b0909f869de3ffef5d59e50f25e13f375204165d1161a27a6f6e4a02c4572a573c29d3e05ad87491eb091637b5530be43a3ba7edad1d82c6b8ca6acc45eebece7cfe175f1f3f86ea59f06dabe185d517f72d8a93dde89f24f25a93e603b7ce8688ec42274aca5024b772a40e000854ee98349246aaa91fe921d344a7dfb18f538da56208ff47f6ade6ab5a023b0679fae5947b0e440225470edbbf813011fb6ce07c097884589474a1bcf53ba7f91224cba76cb2ee19516f229e37fe609aa477f466722d196917c880a4829c39e362dae0324b25eb3cedbd2f4d35c4f374b6e061ef89145550b0c2a9f7b4ddacfb124cb1d20acfa743d85425d0c8e6b320c9328e6dabf67ff60fa357e80ff4c4c812c47da4f74ab7fd21a73651131b26550ea0dc1e02648a7956b866ea1ec9deed845efb2a2219da71741ee90e0580038679a7572f8ab62044f2465e5ea5c4d89b601f3cd5c746364fbbe712ad9ea393303370ad787c7a0af13306c97a11aa7233fd094422f5f65a15efb4915390fe0f22fd547e65a7daf81a0cca3be3a72d025e7c1c19772a3d923621fd22089006be8d7418573efe4d5b8beaac34da7fb39cacecef8cc59801575e18e2cc8abaf5bca12a4ea170bf3a6f171d0a9e28cb5253619b0444531ba905bb12a7bc273012d896f55e3902d7037d259b3ef2897fbb05469c43768a3f5f31b877f43cbf42ca8408f5d1250d634f7941e6448ad69d50c65b3140b0dded074bfea34752d226f31763d5bf12e72419f874662ae8540ecc2b74eb69295dac5fcc7ba66d1ec136f4e79a923ec32c27e5efa604c1e42e2d0708400e43146e8c46f5a1b2e422dd08c865a99b10b0db5b6529353e1941f8bcc485d3688574c4d68ddcad6ca374147dd5029c8a393218024fcfcfa7dbbea78b46511a07388f265254f87be0c495a5afed1cc12df81a31d74a7d19207bee8fb3718b93a46c45e2d2dc35fbafdc06c8c1826a6a3374dccfece2cba782d0557098bbfd1190c38334b669e48f013edee3cfab04e3b528aaa75b1bf1fc69f953162a6b185290daf2b4111c05a36daa19b10aafcd00b27dc07f02c4b8c52d19b132faeac3972dc07892c05169cab009e2c2d5feea6bd226a6230a067062c724ebd46f5fd7793db5f15e0d0f55e63195771d190240e2554d59b37201b07d3e5064d29ee3effae64311cefbce29c7fb2992ac15e127d1739db1bf650b3c044509cc31d1cd90776d18b5a72512624bdc756a5514e21a937445a3772861073265d28d93dd5bc386fb85645531ddc044ed90e9c4278ecccbc15e671adc7399eac23f233a6988887ce06acde1770d99390133288d3347a2be0451e4c25dddce69017957177233b568747796d1c647f8bb5c1323e56fa7defa650f282a0eaf84f0593c218511d20980ffcfa0d4e5ee5112fa8b01e31de8f98c6ae819f0026ca7f04fa1859964a65bb9f03f4359815922d1a7faa36b27b68ceee5ce3137cc2f6886d54f31ae14285f866f177ac1cc10c2820a834b1ce648f5ccd877b8c9618b35f125231ef7d81e48dd25cbd89913a3b927717b0fa69d22ece5cb0c50741e75100f0b85002ffcdb3c5912247a9ec6b00adf4c97dcf225e830653780ffd9c11e86c975c4ca79213f5706fd9ea34fd6f5dcada08493c487c5f555c5beb18b3b2083c505d1bf16cb30cfdb0ed6cdf360d2154bcfe41c2c02cf31248d90462947a142d853432be451b81a0a447816ba4f3a8a3a0c758dd4ec74cf3fa2a79099209616a0961bbbaf2cc0c2e532f5357b7f062b65b5eee1d1732d9337791a00771f6208728de81bb554a87c9df9afcaebcd386857cd5669461bcf118e2dcc0f2f3b4c01a5a1fc6b3c2724c81cb16803e8a1b0bf69c4b3320159180b15af1abfd6dcbd0d2b7b5d9a7688fe9a86a7ca2cc9e5672ea29c3fd529a6a61ffb5be64bda5dcb68e74022ad099060ba19a6449e10c5873fc118ee47d52de7460f80b84785a53713d203386b4b52fc616e1a28df0de91705b85fede2e47b6221ac545651165086721bfd045632a777bfdc98d68dad5a64e87eee977ed4f8f3024378c09532ff9cd75a559b16edf993479f3c43376c3caaec1f4dbd9840c76c4c8f50e8ef3e1b566df00d9a086b30affbcac506fcc176e1da03307fe0e23ef98b84449a0f12ee19f1eea4d9294b59fbaa74a147fc7885b89c09a6b6754efcf66780efdd7128c89ba169d0246edc79d1378506c49dd67634075eb8c5e2dae4051f2d2cda93119826a118a6e63943d363990be450efa4c52ed007b77d41b75f818b046fc0bb2e368c577e4321d83ad0025f0f3a9e3fcc34809d10e1e48ed4c01c4fa0e8d77c6a402e0e1410499d5bfd8d6eb627fa7a149567b91e554f54519348c93ae6d3f240981e082adc7ee4bb03c33f47782cef64b90aaee3970cabf355945d8be8e94aac226a74f404eec77ab0344c1467f25e5ce2097c23f1318e3cd52af87e203c1cf98bc27362e41837ba7f1e72492df438c634f8040d74a15e90302604c089779138e2f9a6dfd5f096ab120dd49a5a118d70e50465c0d2c1052b1a8b1f3804e7704319c890ef4cd29bc7071701acf90597c16253d6aedf5ef95a514911d92c965dbe6c8dd49d7a73750e9aa7eb522361551318c38c570787b8ac71679b1225e4c80e07cda15defd3329560dc1f84b43aac89669ee424d5ad68f40ae2918ddc4ace7b1935253e0c4d20b5f988390009ebbf1e1b0098d3c8434bf77409a21dd0e6d057d1a392357bf0c6dd502ece7004129cd7a8c7c0a569b1a78b6122bf9b2ec4064d3022f2ef0644163b540fae03d087fa1033622b8ce24bc4f562f644cccdae770393f5db805b5c7de038379813a7ff490510907ad250c7fcb21ca1cbc79f7e0a884da6140111cad40608f0029d961624eb9dca78957753c48e9f15504c5af0438c0dbc5ebb5ce9aefebf622b5c7b3c54aced06e7deade512623453a65194e944b318cf43e448e7c9290a4c14d6e02958d39f4691051d5a56b307262b2fec3374442d09b1303031d312a81cdb3c59215c4dc6a3d6481465212e8bc75c0f62256275240808b449438ae1c542689851792044af2194de04ee2704ba19b665da9dfd5744bd183eb902861e5b0e15876dc08a9586a1aa4ab2bda7255edb323e31c040d364ff4504c741ec788ec132fa396d903acdcd32d3d39419d758a3af96db4cf13b3e42773bd680a7c182d0ad6bc747c20d6a4d1331d0b0ae112801717ee69940e12319ba5750348300765ce943f38fe3c393fb8aab0ebcbe299a657ceb86e1c2475511be7c843fce74c3eb29b73fb94c259689e050ecea258429b7e04b999835df6f6069ccf6e49f9281a79cd346ccaf78ab1cdcb785a678f94f0f0d9d4d71623acd452666f5b30669c0dbc086407aa3594892ca84f1365cee9dc754e024ca6576155693231aaf2d29458d735615fae7c4c8fbb6e712439edb2bd61c952fae388cd284be0f5179fdc2aba66cdac730b0151bd01420c672aef886f6203b6c35ce926228ff9a1de45208017e60e678dd49a77248241bb12f35f65a1f4e0f4407e9aa70f20c3f20f449136091a4b9829a6a0d3bd7153f7e21771ccb25ee7e51989e94b0fd828f21968dfe3ff77276918370e8a8e4be2308f7c0e42335f71707f9dc13e685eb90ef25f8133949694c7281f1f6a9819ea1c84834316b07b8f666b7bce01b720a3bad6acb5ebbc1cb874ae29e466fea32b993f397bc344c6e3c525055fd1fc01eee8259ad80ea52ada4b4725dff0445db9dbaba41a57e11281a778307b115a74d266ea0351c50c823d01d7876527dfd3440082d11617decdf083f59adff940cdfffcfdb6da9283fadfcbf8782d7d3638adb69a82c05e8d7d5580d3b74dd1fcd0145519984571461337a5cc8829435397013ff3f13decf5e8dc20cda526eaf7afd6e5e3c10fb38c3b89f89654c99cb05d0112d48f9042c16f77f567ff2afca5416cf420540d22ae1ac5c3edc2d25355b47354cc9bcecda7235a337d157d4e8eee88564f4704ea6562f31859834a9e11959bf2409fc51b7e9df449964bc303821bc75216f0ab6021872803e28c4272d2fa3dbec5c7bf4602d40b1208bc4c25f294182ee17f30d191d9061cb3514e8f9a96b2dab418348e6663d338577bab310c2c25fdc882f0491a7c967d3c3a99e3bf6f83a1193245ed33014bd685358e5b2e7c92b25a8bf92081abf25d4efd2591c71c465a647d5bdb835dcfb6d21c14f1df9c9808f7011ede1a95e15d3b195bd70ea52f37cae88221e69415844c23f98ebc85c8bc22d68596b43b5a2bcf39f1b6a65620fb1fd173bd15458e74ec1f21e1d8a14228a2b0aa5aa98f1beaf06950e80df74dc41f1fec6c94b1c19910c6e904d35f5641a9fd1be6a3a58ad818178c91d0d0a9ab49aebcb6df46574386e43a59cee587ab46e1c5de35ca261de0471f8084e613b97998cd5dcf097c418ddbc7524afbec5727a5bbbecd2a4d13591736da61d4c497aaefb16431035985ba849fa6ee43a5b52a455bc914fb2b0b5776e6334ae638aa710ba9b0b4a9e2f1e90a4c5104532a6a5dcf2e0209eb75f9f0699c7cfe5a15d1ebc64f4df7657117529edf2193a5f46bf53c8bf0f65d9916ecb20c695f896843bd01590ff09c3d599db62ab65be10c093b1cad8ea42395fd1bb14bd951f0965b8d48fe6454a4bf5fc69f233274a6431eb1fa6407b7f51176fd099c581a8657ecbb730f27d80f1fefa24e4b4db8125c676c5481228fcc579e214a1a4cabd49f5a32d7da11df7fc6588d3f028441a7b69d6c595248e2594eed985070eab6dff86c3ad734974dadbf8e1d1b33c4c1e1da341d76bb6b6884cd5a14502f2d16ce50b8e2e66352d2176dba38c655c5c8fa3b13eeafda26d7341ba3190512b13c8a45e644ff50da571934b1472a7a785f12485fab1c7bcb47ecadc58e3b8d1f4b4201e0220d1520d6150d8ea64c8f8f011678f7412ca7e1270d722478912e69c84680a88429baf254d995f08287e31895757730d6bd5a638c871979943799da15df82254b8109e09ffffa1b229a0c7a45f4b2e0d78679700057020e4cec30fa5ebaf0a79c1dc5e75577abe383020b6be4b28f5eedda5119bdb96c5af8fe1549e2e75a175fee7667b6a550a3b21ad8d6d26480c220c86e9e5d29ab85828ee5a8ea6292d66ee016778e60de2b0cba42598bf908ab1cd531de265998bff76e0341cc1fa5e943f9e3502d2a1dee10fd64f28c6d0ffaa60edd16f85cff75d1c5583696629584b2ab66b96d2e77a287435ee196c4358cd81acd86948d37250866aaff5e62dbb1e8687a3ac4b43e2b91559dd81b37992995ddbbd24b13385", 0x1000}, {&(0x7f0000006380)="6e163d5ae23e70290e8e470833cb908481cbd6e0bbaedefe2dfed8fe4fd6778cb2e0ede2ff84c706e0f1d6f88f283d088ae2d3049dff4698313dc15e9fa74bf070ac45bd69eb726c470e5716e54ad2c1dc4a04326e5e4280ecc44fe9e98959f7b5af55d063c5046da41b5fb12fa0113a4612afee095340d7d2a9b4c926c54fdf42ac768b01e0b1f2cc3330c796224b5c16a4f2d8154d0c2f7ce6c9fd7cb3499125cdfe3e5b42e2c0d09ed46393afe32bbcb641877124dc52c631c74c83f383b4a00d71bb742c28010ac96ceb58ca4d45999d", 0xd2}, {&(0x7f0000006480)}, {&(0x7f00000064c0)="44912bc1c1003083e05b19f2060640cb20b34540b44403c3b6ce12896e938a3d3e2cf920e428bb082a4966bf08c1009309df9a8dd711cfba2ffdb9ee99cd3b129681d00239c31dbb98496f3444", 0x4d}, {&(0x7f0000006540)}, {&(0x7f0000006600)="21c7557ede80b311e6dd63254380b9a7", 0x10}], 0x8, &(0x7f00000066c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010100, @rand_addr=0x64010101}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}], 0x68}}, {{0x0, 0x0, &(0x7f0000008c80)=[{&(0x7f0000006740)="31f11a666a68aed1028fae", 0xb}, {&(0x7f0000006780)="67522395271239c383a7a969694b2baef80bd5058dc702c6b77c54ec710574982b2e13f7d1c0906338ef2f06a39d6c66ccbe90b1b7968b649a8dbd57c61303a6d6df5b1edcf614a2a6c37fc6bf1945eef4de8333416dbe98b027f07f38ad84689dba6a6def064da4d57b9c7c641b20887ca492afa8a9d18859951ba13049fdc740d6c2c95f62900be68f574ae8899b7e26c2a40533c25c94571530f3bd4a128fa489aea54159b931a78b0fbc5e633b255dd74b79d834363d47deec83faad97d684e3bd9853565e90737f4517a4f9478fdccf4cc619dc60431e9b2e91281ac1ba1eca221ade48e587942afc82e9e0802355e0ee", 0xf3}, {&(0x7f0000006880)="95fa01f8f1075d52ca86a89f18a3ad8e93926ab99a6f7a075d383801ef0966282f1a12c738d42a2a4b5b31d967eef793ce4291d8309a2d264978", 0x3a}, {&(0x7f00000068c0)="26803f531aa1771b282788c5286ef707f670bf578bf7a36c58e59d24d26005dd140c76c350b53c4550c9f9dc62aa8c28f3688678628454c683a34a6e0287ae5e6fdfcdb7992790db5730b58f01977ae295a1af68a120ff27a93b784d6d0c2158d69f91de46fc65463ec446f9f93783245714ee745686fe4f8ea2af5b1a1a2596b56e1f2853dc4df89bb4a9d755d4397c574b1af69a1b28b096d976fcfdec0885b53decd0a6da6551e969515e2deaddd1a0c36bb38aafc37090195fc895ba6d3b180e0b81cc7bf0d6301dfc03115c1fcb1904fcaba23dcf2978d9e4f76a97ca666e218b0f46a45096fd94bd8716e00c42b71d9c174f", 0xf5}, {&(0x7f00000069c0)="7a53929c6727a0405e7c6a6d506eb03b59c5979eee85dae088e9002a7cc4339fe8215cda27055cfa331bead0918b25849b0426463a47f75fa6ae9bf4a8d56e8091b5bb6a4c2fdfd841388818e3", 0x4d}, {&(0x7f0000006a40)="a52f2f7030f08857977ef59c1b5bbf272b9a2b2c13032fde56edbc3e1e244d673f35cdb334840a7b2b06570a35edd8bbb765c4d387247d777d883b2618f9d5859286bcbcc3fecf79ca5cb7d43153fa66e924001da34f2f37cae0dfd63e3cd4afd2e417cef8b63631b0397305d084ef8fe304631f000ba0dfb72ddb2cef6d1e69137d72c73c28588a", 0x88}, {&(0x7f0000006b00)="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", 0x1000}, {&(0x7f0000007b00)="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", 0x1000}, {&(0x7f0000008b00)="6e668288336440871c29774696f5d3ae3dee44435e73dec4640198b488a341041fe1bae348000d603708acda24e7c917098cab5ce7db9c7354d7570152d4142ad0c04d2dddd4f10a28", 0x49}, {&(0x7f0000008b80)="60fe8565353ea5c09eeb1498c883f0a5bcb0387de5d9bef0f41b5d943817bf25fa480e5cf4321f6580e80cf88f86b5ef296e00a477ffd9d06d0d0ac992af5828525e209ffbd0e97cd8a9aff0d13da4e0e4379f8ac387a8dbd23c2b49308c4b6aefc378f2cea29d868c2b4db6b12c552d8de472b37aec0467dcee51267e0f1a46d4935313e9f1077866114596c829bd0cc000f0c8c815e7cfaa473b1ae3d86562e5502ed8176eb23a5fdd20866b86b516c37d032e1eb7f7ddf86b9e3355891d17ebef69be", 0xc4}], 0xa, &(0x7f0000008d40)=[@ip_retopts={{0x74, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x34, 0x7f, 0x3, 0x2, [{@loopback, 0x8}, {@private=0xa010100, 0x9}, {@remote, 0xffff}, {@loopback, 0x4}, {@local, 0xceab}, {@loopback, 0x7ff}]}, @timestamp_addr={0x44, 0x24, 0xf7, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@broadcast, 0xfff}, {@broadcast, 0x9}, {@remote}]}, @noop, @rr={0x7, 0x7, 0x49, [@empty]}, @ra={0x94, 0x4, 0x1}]}}}], 0x78}}, {{&(0x7f0000008dc0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10, &(0x7f000000b140)=[{&(0x7f0000008e00)="dc4b317a6652a279b8896c6e166ea883428180838768289a613ddcd57a3d58bf84f75ae6f835bb04d6483e0c64c4ec5ad05aa6a845dd930db60454cfeb134af11fd40c32cccfe46276ac8d2798bd77e7e6ec8bf9bb847f15d60b888dad8cca524ebbc93087cb36f212b14c656a69373948cbb79ab52e034b941c7f0dc8706586f6da2b7a80c4fb6a2e117d573b5d79d89a73e3597bc598d48569f1a759b010c18cc87bc0c9f292a5e9bddf20df8e0ab6bfd7bdda740ddb5c64072c2c5592950a246bce96db32390b", 0xc8}, {&(0x7f0000008f00)="d5b0d04f8819fa380b9c9bf5355d7f7c501c3c59e07db5cd0f7bcf61975d3afa8027e0bd485d36742c92bb714f31f01b4eecac61941a66e804b0c35569152454869214ac0db3f0e3f9fe56f85e2af1065148d55e9d9e9f16b89a468e22e36f9ad1079aa3d9a790efea6dae25e573d6ecb60c3e955967db2438579d06e56bd7a34fa0d48f229bcec5dd7071afc99a163751af409949231136bc8507ee6ed94efd572f4b13577e9b717b5dddf9c3d6", 0xae}, {&(0x7f0000008fc0)="516ed114289af235aacf74d7dfe83069ffcfe9cb973b70f3a33ed1bb6b1fda456d232d2320d58ec632e0277d24b34209150ceb709fac4ee6477e095523ececfed8d66b02225e0b13639124c64ccec5a4ef650e3b5a9470d90c445e9e528175eec5f37f2f2e7aee6f182d55809bf3c96fa5ec3461af3e32d3833639c421d956d9c46f003c1628f6719abaf71631f0df2a5bc36c8cda9319a3f8258a4769ace6e092bcbac8815a8be63baa1137d75b2c88c7e153070a7612383f0ebdfe055a0bcf32681c3dda7f4b", 0xc7}, {&(0x7f00000090c0)="0b00d5f2024ce9c2840a3743349cc961b3a5d3bd2b133b0f9c6c6ecc492b3012eb685306844ebf57c4dbcba395bd25ada250acb6237795880a974ed9826ab019e2cf0c1592c98c3ec8a16fcf4237133ddc2bdc33b71b7c49c1089fa46e3dc388a04868f8477203e40a1310acce494ab1f6fe89ad40f095df5e392c69ddd6b27d711c06705256670f10b3ced9f9c04166ddb9e3cbdb8d1454eb0515850ef09d07af8cafcfd9b14c3ecc1aa211d46934b001daea8c9a2320b6adc1292afefcc615dc238200f93567cf25bf14d4026b7e75175c1d5e1c34bcf0ce91f7a829f4d63131450c178196b0e244d3c2ba65288231e06fb654ab48c421c1d0bdd8868d08a0a61b38ffdb32afefb17a734eabdd0eccb93df1f140eff84a569e712048e5601fcbc8ca2743be27e71d505d52c647822871165a5a58cd241ef5637be15c3004b3d085c046872b113961b1273ec3ef18d6ff55a6f8cc9f072198307d93079ad41a2248037f8358ef0c6c5cd66482deaf72513a5e9f49f6b29d2e2e25476954513920d04d8605703ba836dcd49de43ab4ab4147a16b37a4c53924394ec00fa390b63ebca11335db5dfd1f83418679b22f6fc31aac891547d47962ecf030d8064a5c2e268d2d95b02f0b274d6d7811457bcf6bff106efed10cd2d1481e1fe765fca33b642ae2020c9acb2b28266881353934d084c78206478a3012734eb1297e55d7b27b6380c35134f983710eefab09c44165c7f48fd9a0a1af2cc8a26ac0459805e2eb2dd01b9cb365d731318ac3400bea673475b008d67be1b09fabe93801f2945f497186e220ae7725ffd98e1a9b3ec1b2d6e0cb16b9942e763c3172911e5924d7d547a844b5618b2ccf74b12fd1fc88bff6052e92be678c79db291f90b2f19adba441e3ee094d7779fad2ba048e02f389cc8670fe9af9453f85b556089554967b4d5d3434c4e28eda930891f822e16de21af0592eb2241e05bf28afc33c3acfb72b12f3fc192cdf8d7299bf7a23b8415ab7d3ce1d2a8f8d4553b64a4fc4c2eceb716f62c566e11d869f2217e028ccda5c1f2f0670166086d041ae35591f3de8c17f53a1335285564bb485221a5e2f56b29c07fda3e308e2baad9c0dec711fa065e7c7eec5406fc76f409ca4d53ebaaf6200494a05d88d81f7ceda5a7f9a723c30734cf647b9b9bfb573591111ba33d203169d1dcea6426f47e3d8601b223be4dcebd5bbfec5a945a8e98adc50a0eb1362c8c688983d00b8299df0bd978ff1c7518a1e49edbaa685ddd62def6712db63b135fe99b0122742daf5db2eea0942d2794a130d9c0fd45bf767c47946216b53ec214529d33ce67abe5726102bcd3c04b5e59a73b11dbe917bdc24aa8e73af8c0916cb5ce9aeb65a0db2b90213cb5dd911a73ed93f58d3c66a19f09b85036f03338ddda7068b9f0556d56032bb70df0a97fe3265e1ce14800a12c827e7888f00026d0969e808cce8433be55e2965ba5e7c40ca9dadd2ef2f302726ad5267418a9f7556c6bfd11340108e60830ad2e1f6138de34c569fa3b9aa1d375c90b8ce42c0f7f5523dd2e9cb33032483906692e54d6697616e039fc5e156d3846adf64a0abd17aae5ba075d50d4b534a22e8a5cefe9099e1254ba3d8e95b28b4fea27958fcc63b2620689c562489c066f159a63aac22bbe0ba5e894d42b383f6c929cbf4a8591529c6303e4a9728d955989f45422833ca8adf35c8124a330956e12855fcfaba142d3219aa376ca4fcb55d800d8a314afab96637262f54df6dbe9015bfe7a598183c74399d134c2070f830da9aeb5191c1126ce9197a995e6658559cdec1258758611706ec1a4032c28c642257472b1560058215e8595bdcfa5f81e1a71516500fe7c83d603482e672757115532dfc0fd81c2ca1ee9ae033a540acd6ac3e1543935362b72574fa5852907bcda18fc2149929a5c3293480b9263fe1bfbd448255643a4577e659737d63bff68980c98873bf3fefca68e516a9ef2989dc9808ce48da9eb9b2cc9aa7c4b6a74e70dea9cb48bd83dfd92852c97e9ad221242baa51493f8a87fcced1311b149e18050da7e07e1514ef7076e734220429f584b2a70beebc62c8e0edf2b03af0a0e6d2f0a787190401e8d99f870e9a9463c838e3bfc02fe4abcc8d7a0024300e58c8d2e83931b9a5b54c4895947a109ab7199b2d860c97ba954e5263d8d2c06e922592a193a6c0fb097fd59868f765dd50ff14af615df7724ab4386ff50c14de0e2bdebbb8bd54294f3f9b04cb4e7381f879e11987bad9b6dfa7cba7456f406561b18be1433c48a9752277383086c3803a180bcda3fdcc7d823271ab6c7065174fa49c1d39854cf2120d34a61681992bb62637141f3fde397f11030b7973762dfafb6ad3ac95b194313e5d6b76b7de2046601db39fa1c19bfb55c9a45b56ed012a39b3097911e8abae8e26c2b028049f7e7e7da6b9795a2d70b464458332886d26119b53b137a4d0e2ad6cb8d74dd8efee435f2bec6dc240246a842fc410cf0085bd6e738fe17b109f0a56dbbdb4a727d88193c7919347e26ce58b922cbd536533565fde55bad6219aca1765ae0bdb1650ba7b8f9c4ebbed2e23290d050df31a3ad10d9ee0ac58b1d881db67c4d57ad36f23ebc56050d6919d88ddae50ecbf6cb2d213cc6a187ceb23c8c04640a3d699bafd8f4d06ca94aac07c0e917962484fe45c6f52f9b95ed2ff971acb06496ac598314bb2338a9433ba506e6929fdf40f9dcc7964102f18fb6520ff9decac18b7d9d1a7a8e9f02905f7e864d166cf0a6e9c1301ac76b33bea40bf7efe25157c2ce3eaf6f88bce7523f0257480352e8cc39508fe462e2c389a1d3b1d495c2d22b1f603aaa321fa124289947a065f9b03803d5f2109f6352b4520fd92d6f942aba121a9e919c5d92106979cd8270cd8c8463fdd8e3ba80fa85bd1dc5b72c64fc17d5bb70907e9447638ea7ab80915e8fc7cfc23aa2216b552bcd607c2b11c9fa157e273b4cc5e0f91037d66fcdb8cf5e3d29b420c24f61af68bdde51d7228608676864eff9ad901d3123a752c9818001268bf4c9f23f3c6c69e2995147788de3f994ef90bd0b0f12ba88737070fd81b2778f177ec047088b3e37355543ab79c7fec897fe5011feae6f7a231c7440d2d117a6965b2ebe532999e276e219458294f4486a7e1a4aa4231bd1cb26aeb6e8a2cccd18007307dd7c1883125cc8a01cf5a42e9cc1c1e860d65b8ab204796bdd35b1cac61d75639d38f4380e600f1be3dbb4ae05a13c1abb7d1269be9a2ee2ce744d5dad5b3622bad84d094bd5e894f107747c5bc8347b4023d18103622dfa44fbde88ef70abb3f8e1458e656328f57eed8ebbf5c4e9790d9f577275a3787c1eba0261451e744adda20300dd442b990341cbb532e0a9db73efc637068784a2f7cc6bacde62c5554af236ddd52dbdaa3f41763223bdb3b72aeb4f4c253a319847cf97a6b5b98eb7d08a2042a629fcbe552ef979cdc3d4d554619516b5004a526770931bf9c4c50199cd609bf627708e8e3c6cc77f9b2b9b679dc591a36009af6a17934a0f5f9db5e08143054367e7134d850c4fe1d323bba110b7bd89f8ef587f6def70f63312d4d9e09cbd8abbe3342d68b34ed5409c14662d9872ce5b867c1c8ab575de1078975e6a211e519e7c703a91428bfd0cd3f31a1d175f6093d94b7dcd40d4fc303b274ed9d5a542d807e0dc600b3ec389b2cb651d09eed615c922b5b6e154ae16644cdbb1e1674b93131c96c8cc1d0fe6bac1ecfe1b7cce6fb4e91597a5c99e269b2ad6099ce3fccdb3f9af1f92271d6ed169acbe80de7955cf0c3a0711486cd5df2f0c56b8bfb8404bfb925d3dbee1f27f7fb0e0b206a263d2cc1c9258bd9a80134674cd1f73789c22d06aced8f7fbf372552ecae117eebfb8f08fb4c8619171da6807c1806ef2fad8879363bc72dacc6a9cc8ab09c685b46568d5c51413cea21a2c36ef47ed12cd9469206e36877f46451173395abfda0f0cb605450f49aa03feff3df0001f54e791091100d31ff3f86b1cba6a4bec4500456522f75e6a8c7014a16f229029ac2933f64111fbeda6ce289c0daa5487a9bc43d5168e3ad14c48fd40045955184ee531bcfe6a54e705da312fc9ee2b9ff17a85e180e4266968460965aa39f76752b704b5f09a03f181d2a1eb5eb78a90561ac7f8e57da88197c922ca4ae24cf631a25b4df9b8b3071d564eecbe63c92e5330bc5aa594ce82dd564d5d21b3e19f4acdfce60dd8479b9e346b97264af4260afd4f1a9cc67ba75ac148bd5755a8b6359c69f84205e6ec2f5528f553571da5a9249320473b0a623c69843b16e8edbfe08272ba97df3ed1d793877e9ddbf60ced6d200bd9b38a205c3457eedee3d550e74a8d9af2721c8ee4d59f669d0381b38f5e96fb10a45ae27f81ae4bae0d6f8f542c2392fa3f47303db02bb5c226e01a129b81b3643092e210b993028c9a67ef439cf0613dc9dd0011e85d537daccc1363d5514e47b3e033078e618f89eafc8d3e7dfab072d37023764c392372b18967fb3bf27273416f0031cd09f0b5245cdd785e0b9468f0ac6c1b5a9487d754c1131c0ac500f4db0d512d71a31aaeafcb14c1764d532371b1de6988282a4b3d30b00f0fb7127db391e5c2395f4190b33ef0f3bef6ee3a3efd89162c2af56be834121c04a893ff534e53c20e74354c1c06c5f5e520357d84f9fc54abd9452bd8ff9013c34e8f4cf08cc961fada0c3bbd4f6ea9103d8adab2ab7613ce9976b9cffbc410904b1d4fbae3adf0bf3d97381d7274be67e63a6ecd2735aeea1e66e6b7c3f543b99509580e4315e257ec62951a0402e7b6f4a2219ab8023865db164be75a31fe4052f5b63d13771410e79b437dcc20faf4de725f1ad3d43b629b2be9c5d7419d83d32db7c13e0c938aeda85602db35813f2243947f2f15ce6a69079b19bc0689bc33122293c1f8b508aaa8e12c6d1ff84dc7c37b59c2133b5ea16d08da4fcc8f4757ce4749eb2a1472fdd25442a4836703c5b7ac81a523b86424bdf92b53850bbbb7dc5bd2b0955248f675e7a8ee75c46742a24ca26a5baa10eb22a9053a5a06b24fd5ca4c07c752a208faf91d784a5e10a94c67948c1afddd81f0573fe35a6be83ada414659f6476c7be0dc528631607a888d1336a702f319b490ee45c31ba941883d65792f539f3325355fd467b477c6643cd886e02aa979c68a3e9b16f16007b2ce55abcb04468044b9fa1148317c7bdb4577c2cbf85ca387749ec5314b8f91ffff26aa0d4365d9be493959552b6db116cd5d0f016bbccf40bfcf362cfdc112e2967427514fcf516ce5a1f308ff937a2d70ebffa3e3e1025c1855bd4fd0e5599c1f776b9cd991acde2b5805577e3a8a07caa1b76d51664d966083ddba9fbf697648f91b81e6e0b254e9d255f8dbe3175010cd084ecbeff6c0ddcaa8cbfa809968478d5a0387dd4d3b89d2741a0bd0440573478c1a715f8acc543829cd774a152316f0097a4e545d2f22b38620d70952c665094edf70226251e7d90074a236091e77e0618a6901774ef0ace51bb8f0c97705b25f6583ff6878411e4f647b77b655b12d55405215837602378e09c0019d829d80f111dec2d006fe79f5d558c1c7891b005b70bcb78a4abf920149efb375cc5ecc4ddfac3d8430a4f10d4ea8d4f2ca6edba014e3c3a921e5c9c33904b4c5b504212c3989a5aa67a8ccfc24f73ff67fd3adff76b804c89d9f9611de4ad5c3dbeb3a4b4fc83c3cd8c7f12f46e4f21db7cf9bdfb400ec53f5fc7", 0x1000}, {&(0x7f000000a0c0)="bcee1ad1ab82821404149c9fff38e6c8288163972a49f00f3c48aafb20a37c8c448585cd3a14f7d3ee67eba34641230a953281", 0x33}, {&(0x7f000000a100)="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", 0x1000}, {&(0x7f000000b100)="d5a2543478cfc9aa58543ac0f5e9cbea3dc73cd4aecff4aaa47c6702ed310dcd32d467286761bbd696", 0x29}], 0x7, &(0x7f000000b1c0)=[@ip_retopts={{0x38, 0x0, 0x7, {[@ssrr={0x89, 0x1b, 0xb2, [@multicast2, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @empty, @private=0xa010102]}, @ssrr={0x89, 0xb, 0x63, [@multicast2, @dev={0xac, 0x14, 0x14, 0x2a}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2cd3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_retopts={{0xb4, 0x0, 0x7, {[@rr={0x7, 0x1f, 0x66, [@broadcast, @remote, @dev={0xac, 0x14, 0x14, 0x34}, @multicast2, @private=0xa010100, @rand_addr=0x64010102, @rand_addr=0x64010102]}, @lsrr={0x83, 0x3, 0xa5}, @lsrr={0x83, 0x7, 0x97, [@multicast1]}, @timestamp_addr={0x44, 0x44, 0x5b, 0x1, 0x8, [{@initdev={0xac, 0x1e, 0x1, 0x0}}, {@loopback, 0x200}, {@broadcast, 0x8}, {@remote, 0x3}, {@multicast2, 0x1}, {@remote, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1a2}, {@multicast1, 0xff}]}, @lsrr={0x83, 0x13, 0xee, [@dev={0xac, 0x14, 0x14, 0x3a}, @rand_addr=0x64010100, @private=0xa010100, @remote]}, @rr={0x7, 0x23, 0x36, [@multicast1, @multicast1, @empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @initdev={0xac, 0x1e, 0xfb, 0x0}, @remote]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_tos_u8={{0x11}}], 0x168}}, {{&(0x7f000000b380)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f000000b4c0)=[{&(0x7f000000b3c0)="bc3721db0b48e83b51880728d4dd49c0d6f205a206d005b088794f07857895f314fb5be948f6136e4491e9efb9b01e91f3e29f57f08414d2ef2b6a830a9b644e7f30b4f58b726426dff4f912cd679f4d16266c471412800d9d211e9952", 0x5d}, {&(0x7f000000b440)}, {&(0x7f000000b480)="0970db9bb045256fd1f5fbb6153269aaadf0034999edf8c3dbc146", 0x1b}], 0x3, &(0x7f000000b500)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_retopts={{0x38, 0x0, 0x7, {[@end, @rr={0x7, 0x17, 0xa6, [@loopback, @rand_addr=0x64010102, @loopback, @remote, @rand_addr=0x64010101]}, @ssrr={0x89, 0xf, 0x37, [@rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x10}, @loopback]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffffff7}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_ttl={{0x14, 0x0, 0x2, 0x64}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_retopts={{0x20, 0x0, 0x7, {[@timestamp={0x44, 0x10, 0x25, 0x0, 0x6, [0x0, 0x40, 0x80]}]}}}], 0xd0}}, {{&(0x7f000000b600)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10, &(0x7f000000b940)=[{&(0x7f000000b640)="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", 0xfa}, {0x0}, {&(0x7f000000b800)="44c046972485851e8c0e646fbb3db1c724ffc0b9a6d5c838196ade842c02a8b73bc51a2509ddd4d142ba079dfdbd4af614e5187db65b62e3d93fa77242a2de5c1b24ea58179c979d6d5eab5972418abbae4306f83e0e53fc43f89644d021f52974e7adbe276f94c7fb9a4682171ffd3b9899a0585e421ab52d968896c0d54271bafb6120794428cc4278f28885deb67bcbc5ee9fe850bc2b87d5e8d1f07750cfa22018c72a8275565b47bc40d1ec7fc70f585ebe5594bd785f494b183e5be4964cf281c4514f765eb0b239605ada0604a536e06738126a652efe6c5426f22d43c9f54a5549709be878eaa15481c2a233", 0xf0}, {&(0x7f000000b900)="8fbf4d09c0568803a7f7c8674909e1", 0xf}], 0x4, &(0x7f000000b980)=[@ip_tos_int={{0x14}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}], 0x48}}, {{0x0, 0x0, &(0x7f000000ba80)=[{&(0x7f000000ba00)="241b719cfa992b3bb11eb5887051f6ffeb48bd3958b0e197c5d3a77064018500f203343817da43aa80da6540b706d27b104f4747b22e349dee0abe22f741b5", 0x3f}, {&(0x7f000000ba40)="b094f0f685b6e1822eac", 0xa}], 0x2, &(0x7f000000bac0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x3e}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffff}}], 0x38}}, {{&(0x7f000000bb00)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f000000cd00)=[{&(0x7f000000bb40)="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", 0x1000}, {&(0x7f000000cb40)="763664506f8d1a6a50cd9fcd873ce84f923a63b676d2d7ba92e33000bd0399e5a32dad9d08ae21421948bb65e919e0f6e8ecb429e620d8596d2a39ffe6f22548e0a0d36c541e67e5fda8164e9c6286379440558c68637a4d5085ff41fd", 0x5d}, {&(0x7f000000cbc0)="ac1388bf40656db16219e1a247ad09f0c6d4760c8a9c057ce29c683ea98e643f7588667f6e300f2c96d719a3b1c2ac42c4867cc06f0dac9a", 0x38}, {0x0}], 0x4, &(0x7f000000cd40)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2}}], 0x18}}], 0xa, 0x4000800) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f000000d000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) write$snddsp(r3, &(0x7f000000d040)="7806f6d1fbbc90f38153aa71e63c13c671e213846bf3daabada379eb929016a2a9be86a725a283f19948a204207900", 0x2f) 02:29:14 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, 0x0) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x15, 0x0, 0x1, 0x0, 0x6, @random="68ff132cb884"}, 0x14) 02:29:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000600)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x14, r1, 0x1}, 0x14}}, 0x0) 02:29:14 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, &(0x7f00000001c0)=0x6) 02:29:14 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000640)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000006c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000680)={0xffffffffffffffff}, 0x106}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000640)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000006c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000680)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000001800)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}, r3}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000001800)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 02:29:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000000040000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:14 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0145608, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "15e12073"}, 0x0, 0x0, @fd}) 02:29:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x41) 02:29:14 executing program 4: socketpair(0xa, 0x1, 0x8, &(0x7f00000000c0)) 02:29:15 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:29:15 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0x5460, 0x0) 02:29:15 executing program 5: syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x0, 0x43) 02:29:15 executing program 1: add_key$user(&(0x7f0000000100)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)="80", 0x1, 0xffffffffffffffff) 02:29:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016e40000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:15 executing program 4: socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x19, &(0x7f00000001c0)={@remote, @multicast, @val, {@llc={0x4, {@llc={0x0, 0x0, "c6"}}}}}, 0x0) [ 2206.991121][ T3646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:29:15 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0205647, &(0x7f0000000180)={0x0, 0x1, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "15e12073"}, 0x0, 0x0, @fd}) 02:29:15 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000001680)={&(0x7f0000000040)={0xa, 0x4e20, 0x0, @private2}, 0x1c, 0x0, 0x0, &(0x7f0000001800)=ANY=[@ANYBLOB="1400000000000000290000003e0000001f0000000000000028000000000049"], 0x128}, 0x0) 02:29:15 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vsock\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, 0x0) 02:29:15 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001480)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$snddsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 02:29:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016e41000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) [ 2207.230163][T27517] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2207.240903][T27517] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2207.249044][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2207.259583][T27517] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:29:15 executing program 4: write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000040)='1', 0x1) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x0) [ 2207.421986][T12296] Unknown ioctl 1079006000 02:29:15 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:29:15 executing program 1: bpf$MAP_CREATE(0x3, 0x0, 0x88) 02:29:15 executing program 2: io_getevents(0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000008c0)='TIPCv2\x00') 02:29:15 executing program 5: syz_emit_ethernet(0xe4, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000008100000086dd60"], 0x0) 02:29:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016e42000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:15 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 02:29:16 executing program 2: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/card1/oss_mixer\x00', 0x0, 0x0) read$proc_mixer(r0, &(0x7f0000000240)=""/119, 0x77) 02:29:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000001380)={&(0x7f0000001280), 0xc, &(0x7f0000001340)={0x0, 0xf0ff7f00000000}}, 0x0) 02:29:16 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000080)={0x0, 0x0, 0x0}) 02:29:16 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001480)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) select(0x40, &(0x7f00000001c0), &(0x7f0000000200)={0x8}, 0x0, &(0x7f0000000280)={0x77359400}) [ 2207.869056][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration 02:29:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016e43000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) [ 2207.966634][T12351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:29:16 executing program 5: getresuid(&(0x7f0000000080), 0x0, 0x0) [ 2208.018385][T12351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2208.026684][T12351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2208.034927][T12351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2208.176929][T12351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:29:16 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:29:16 executing program 2: msgsnd(0x0, &(0x7f0000000000)={0x2, "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"}, 0xfd1, 0x0) 02:29:16 executing program 1: 02:29:16 executing program 4: msgget(0x0, 0x90) 02:29:16 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, 0x0, 0x0) 02:29:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016e44000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:16 executing program 1: r0 = socket(0x23, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x4c}, 0x1, 0x0, 0x1000000}, 0x0) 02:29:16 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0xfffffffffffffffe, &(0x7f0000000000)=""/163, 0x0, 0xa3, 0x1}, 0x20) 02:29:16 executing program 5: pipe2$9p(0x0, 0x40800) 02:29:16 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000014b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 02:29:16 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000240)) [ 2208.549137][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 2208.549154][ T28] audit: type=1804 audit(1602037756.809:651): pid=12410 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3696/bus" dev="sda1" ino=16038 res=1 errno=0 02:29:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016e45000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) [ 2208.743987][ T28] audit: type=1804 audit(1602037756.979:652): pid=12433 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3696/bus" dev="sda1" ino=16038 res=1 errno=0 [ 2208.818292][T12447] nla_validate_range_unsigned: 16 callbacks suppressed [ 2208.818303][T12447] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:29:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 02:29:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001340)={0x0, 0xf00}}, 0x0) 02:29:17 executing program 5: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@remote, @empty, @val={@void, {0x8864}}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "19bdc8", 0x44, 0x2f, 0x0, @private2, @local}}}}, 0x0) 02:29:17 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r3 = dup(r2) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r5, 0xc0185879, 0x0) sendfile(r3, r4, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:29:17 executing program 1: socketpair(0xf, 0x0, 0x0, &(0x7f0000000080)) [ 2208.894347][T12458] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:29:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016e46000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:17 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x1416c0) 02:29:17 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0x13}, 0x40) 02:29:17 executing program 2: perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 02:29:17 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) 02:29:17 executing program 1: mmap$snddsp_control(&(0x7f0000ffb000/0x4000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x83000000) 02:29:17 executing program 4: perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x806, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x60}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 2209.199403][ T28] audit: type=1804 audit(1602037757.459:653): pid=12488 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3697/bus" dev="sda1" ino=16309 res=1 errno=0 [ 2209.239532][T12489] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2209.323217][ T28] audit: type=1804 audit(1602037757.549:654): pid=12492 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3697/bus" dev="sda1" ino=16309 res=1 errno=0 02:29:17 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f00000070c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) waitid(0x0, 0x0, &(0x7f0000004d40), 0x8, &(0x7f0000006e80)) 02:29:17 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x1, 0x6, 0x0, 0x4, 0x0, 0x1}, 0x40) [ 2209.371699][T12500] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:29:17 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r3 = dup(r2) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r5, 0xc0185879, 0x0) sendfile(r3, r4, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:29:17 executing program 1: bpf$MAP_CREATE(0x3, 0x0, 0x10) 02:29:17 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000001680)={&(0x7f0000000040)={0xa, 0x4e20, 0x0, @private2}, 0x1c, &(0x7f0000001500)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f0000001800)=ANY=[@ANYBLOB="1400000000000000290000003e0000001f0000000000000028000000000049"], 0x128}, 0x0) 02:29:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016e47000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:17 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0205647, &(0x7f0000000180)={0xf000000, 0x0, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "15e12073"}, 0x0, 0x0, @fd}) 02:29:17 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 02:29:17 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0x2, &(0x7f00000000c0)={0x0}) 02:29:18 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) [ 2209.694487][T12532] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:29:18 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r0, 0x0, 0x0) [ 2209.771325][ T28] audit: type=1804 audit(1602037758.039:655): pid=12536 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3698/bus" dev="sda1" ino=16323 res=1 errno=0 02:29:18 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0205649, &(0x7f0000000180)={0x0, 0xe7ff, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "15e12073"}, 0x0, 0x0, @fd}) 02:29:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000001380)={&(0x7f0000001280), 0x2000128c, &(0x7f0000001340)={0x0}}, 0x0) [ 2209.850036][T12549] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2209.942035][ T28] audit: type=1804 audit(1602037758.159:656): pid=12550 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3698/bus" dev="sda1" ino=16323 res=1 errno=0 02:29:18 executing program 2: perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 02:29:18 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r3 = dup(r2) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r5, 0xc0185879, 0x0) sendfile(r3, r4, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:29:18 executing program 4: add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa) socketpair(0x0, 0x0, 0x0, 0x0) io_setup(0x0, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vsock\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, 0x0) 02:29:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000000048000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:18 executing program 5: ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) getrusage(0x1, &(0x7f0000000200)) 02:29:18 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, 0x0) 02:29:18 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000640)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000006c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000680)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000001800)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @loopback}, r1}}, 0x48) [ 2210.466765][T12577] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2210.487012][T12578] Unknown ioctl 1079006000 02:29:18 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) sendmmsg(r0, &(0x7f00000066c0)=[{{&(0x7f0000000100)=@hci, 0x80, 0x0}}], 0x1, 0x2004c000) 02:29:18 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) 02:29:18 executing program 2: syz_genetlink_get_family_id$net_dm(0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000014c80)='/proc/thread-self\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000014e00)='TIPC\x00') [ 2210.568756][T12595] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:29:18 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x0, 0x0, @local}, 0x1c) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) 02:29:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016e48000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) [ 2210.740598][ T28] audit: type=1804 audit(1602037759.009:657): pid=12612 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3699/bus" dev="sda1" ino=16314 res=1 errno=0 02:29:19 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCGIFCONF(r0, 0x8912, 0x0) [ 2210.894541][ T28] audit: type=1804 audit(1602037759.149:658): pid=12617 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3699/bus" dev="sda1" ino=16314 res=1 errno=0 02:29:19 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:29:19 executing program 1: socket(0x28, 0x0, 0x8) 02:29:19 executing program 2: syz_emit_ethernet(0x7e, &(0x7f0000000140)={@remote, @empty, @val={@void, {0x4305}}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "19bdc8", 0x44, 0x2f, 0x0, @private2, @local}}}}, 0x0) 02:29:19 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 2210.937853][T12620] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2211.029604][T12632] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:29:19 executing program 5: io_setup(0x0, &(0x7f0000000280)) [ 2211.070146][T22839] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration 02:29:19 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x6, 0x0, 0x0, 0xde0}, 0x40) 02:29:19 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x11, 0x4, 0x4, 0x3, 0x0, 0x1}, 0x40) 02:29:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016e49000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:19 executing program 2: syz_80211_join_ibss(0x0, 0x0, 0x0, 0x0) socketpair(0x1a, 0x0, 0x0, &(0x7f0000002280)) [ 2211.148911][T32026] net_ratelimit: 188 callbacks suppressed [ 2211.148922][T32026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:29:19 executing program 5: perf_event_open$cgroup(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) [ 2211.279020][ T28] audit: type=1804 audit(1602037759.549:659): pid=12657 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3700/bus" dev="sda1" ino=16309 res=1 errno=0 02:29:19 executing program 4: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0xa) 02:29:19 executing program 1: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r0, 0x4112, 0x0) [ 2211.441306][ T28] audit: type=1804 audit(1602037759.699:660): pid=12675 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3700/bus" dev="sda1" ino=16309 res=1 errno=0 02:29:20 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:29:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000004a000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:20 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000070c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_INFO(r0, 0x4b47, 0x0) 02:29:20 executing program 2: pipe2(&(0x7f0000000800)={0xffffffffffffffff}, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000003, 0x10, r0, 0x0) 02:29:20 executing program 4: syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x5, 0x208000) 02:29:20 executing program 1: openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) [ 2212.028018][T15234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:29:20 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x5, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 02:29:20 executing program 1: syz_emit_ethernet(0x16, &(0x7f0000000040)={@empty, @local, @void, {@mpls_mc={0x8848, {[], @llc={@snap={0x0, 0x0, '.', "330db3"}}}}}}, 0x0) [ 2212.188015][ T2630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:29:20 executing program 2: syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x141000) 02:29:20 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0x40045613, &(0x7f0000000180)={0x2, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "15e12073"}}) 02:29:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016e4a000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) [ 2212.348633][ T148] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2212.359377][ T148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:29:20 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000070c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_INFO(r0, 0xc020660b, 0x0) [ 2212.588653][ T148] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2212.599388][ T148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:29:21 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:29:21 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001480)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$snddsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000e, 0x10, r0, 0x0) 02:29:21 executing program 1: pipe2(&(0x7f0000000800)={0xffffffffffffffff}, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000e, 0x10, r0, 0x0) 02:29:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000001b00)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001ac0)={0x0}}, 0x0) 02:29:21 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f00000000c0)) 02:29:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016e4b000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:21 executing program 1: r0 = socket(0x23, 0x2, 0x0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x4000000) 02:29:21 executing program 5: socket(0x1e, 0x0, 0x400) 02:29:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={0x0}}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={0x0}}, 0x0) 02:29:21 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0x0, 0x100}) 02:29:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000004c000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) [ 2213.236611][ T2630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:29:21 executing program 2: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000001c0)='ns/cgroup\x00') ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, 0x0) 02:29:21 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:29:21 executing program 1: syz_genetlink_get_family_id$batadv(0x0) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) 02:29:21 executing program 5: syz_genetlink_get_family_id$tipc2(0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000b40)={0x12, 0x10, 0xfa00, {0x0}}, 0x18) 02:29:21 executing program 4: syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) 02:29:21 executing program 2: openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x10000, 0x0) 02:29:21 executing program 1: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x246000) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000100)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={0x0}}, 0x0) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vsock\x00', 0x0, 0x0) syz_open_dev$vcsu(&(0x7f0000000400)='/dev/vcsu#\x00', 0xf0ad, 0x1) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000014c80)='/proc/thread-self\x00', 0x0, 0x0) syz_open_dev$vcsu(&(0x7f0000014cc0)='/dev/vcsu#\x00', 0x0, 0x0) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000014e00)='TIPC\x00') 02:29:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016e4c000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:21 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000001300)=0x7, 0x4) [ 2213.628391][ T148] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration 02:29:21 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f00000000c0)) 02:29:22 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, 0x0) [ 2213.770464][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 2213.770483][ T28] audit: type=1804 audit(1602037762.029:665): pid=12843 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3703/bus" dev="sda1" ino=16367 res=1 errno=0 [ 2213.886304][T12851] nla_validate_range_unsigned: 10 callbacks suppressed [ 2213.886315][T12851] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:29:22 executing program 4: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000004040)='/dev/ubi_ctrl\x00', 0x818240, 0x0) [ 2214.079152][ T28] audit: type=1804 audit(1602037762.269:666): pid=12854 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3703/bus" dev="sda1" ino=16367 res=1 errno=0 02:29:22 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r0, 0x107, 0x6, 0x0, &(0x7f0000000080)) [ 2214.271043][ T2630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2214.285235][T12872] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:29:22 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:29:22 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0x5451, 0x0) 02:29:22 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c000000010901010000000000000000020000050800064000000001080003400000000308000542000000170809"], 0x3c}}, 0x0) 02:29:22 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, &(0x7f00000001c0)) 02:29:22 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 02:29:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016e4d000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) [ 2214.577844][T12891] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. 02:29:22 executing program 2: syz_genetlink_get_family_id$net_dm(0x0) [ 2214.627196][T12894] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:29:22 executing program 5: openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x4000, 0x0) 02:29:23 executing program 4: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000280)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDZAPENTCNT(r0, 0x5204, 0x0) 02:29:23 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000140)='tls\x00', 0x4) [ 2214.795238][T12903] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2214.894695][ T28] audit: type=1804 audit(1602037763.159:667): pid=12901 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3704/bus" dev="sda1" ino=16384 res=1 errno=0 02:29:23 executing program 2: openat$vsock(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/vsock\x00', 0x121140, 0x0) 02:29:23 executing program 5: perf_event_open$cgroup(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x51c0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 2215.078722][T25033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2215.082817][ T28] audit: type=1804 audit(1602037763.320:668): pid=12911 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3704/bus" dev="sda1" ino=16384 res=1 errno=0 [ 2215.307750][ T3646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:29:23 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:29:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016e4e000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:23 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000100)=[{}], &(0x7f0000000140)=0x8) 02:29:23 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0x40049409, &(0x7f00000000c0)={0x0}) 02:29:23 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001480)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) read$snddsp(r0, 0x0, 0x0) 02:29:23 executing program 5: socketpair(0x18, 0x0, 0x0, &(0x7f0000000740)) 02:29:23 executing program 4: r0 = socket(0x23, 0x2, 0x0) recvfrom$l2tp(r0, 0x0, 0x0, 0x80010140, 0x0, 0x0) 02:29:23 executing program 1: sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, 0x0, 0x0) openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000014e00)='TIPC\x00') [ 2215.521072][T12942] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:29:23 executing program 5: msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f00000000c0)=""/111) 02:29:23 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000180)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x101}}, 0x18) [ 2215.597708][T12955] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:29:24 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000000109010100000000000000000200000508000640000000010800034000000003080005420000001708"], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 02:29:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016e4f000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) [ 2215.765196][ T28] audit: type=1804 audit(1602037764.030:669): pid=12967 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3705/bus" dev="sda1" ino=16307 res=1 errno=0 [ 2215.949592][ T28] audit: type=1804 audit(1602037764.210:670): pid=12976 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3705/bus" dev="sda1" ino=16307 res=1 errno=0 [ 2216.030217][T12980] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2216.067905][T12981] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2216.136351][T12987] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:29:24 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(0x0, 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:29:24 executing program 5: syz_genetlink_get_family_id$net_dm(&(0x7f0000000100)='NET_DM\x00') openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) 02:29:24 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x200002, 0x0) 02:29:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="60000000b230bd"], 0x60}}, 0x0) 02:29:24 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x8, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "15e12073"}, 0x0, 0x0, @fd}) 02:29:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016e50000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) [ 2216.336353][T13013] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2216.347920][ T3646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:29:24 executing program 1: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000900)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB='wsync,logbufs=1']) 02:29:24 executing program 4: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) 02:29:24 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000001c0)='ns/ipc\x00') 02:29:24 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x246000) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000040)={{0x0, 0x20}, {0x9, 0x80}, 0x0, 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000100)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r1, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x0, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10004080}, 0x12) openat$vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vsock\x00', 0x80000, 0x0) syz_open_dev$vcsu(&(0x7f0000000400)='/dev/vcsu#\x00', 0xf0ad, 0x1) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000014c80)='/proc/thread-self\x00', 0x101000, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000014cc0)='/dev/vcsu#\x00', 0x8, 0x100) sendmsg$NET_DM_CMD_STOP(r3, &(0x7f0000014dc0)={&(0x7f0000014d00)={0x10, 0x0, 0x0, 0x2be51ac03358d187}, 0xc, &(0x7f0000014d80)={&(0x7f0000014d40)={0x14, r2, 0xe3983daec1a3df80, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20044801}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000014e00)='TIPC\x00') [ 2216.451185][T13020] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2216.558627][ T28] audit: type=1804 audit(1602037764.820:671): pid=13024 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3706/bus" dev="sda1" ino=16383 res=1 errno=0 02:29:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000001380)={&(0x7f0000001280), 0xc, &(0x7f0000001340)={0x0, 0xf00}}, 0x0) 02:29:24 executing program 5: perf_event_open$cgroup(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xc4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 2216.805773][ T28] audit: type=1804 audit(1602037765.070:672): pid=13048 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3706/bus" dev="sda1" ino=16383 res=1 errno=0 [ 2216.830084][T22839] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration 02:29:25 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(0x0, 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:29:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016e51000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:25 executing program 2: ioprio_set$pid(0x2, 0x0, 0x0) 02:29:25 executing program 4: setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000040)=[{}, {}, {}], 0xffffffffffffff9c) 02:29:25 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, 0x0) 02:29:25 executing program 1: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {0x0}}, 0xfffffdef) 02:29:25 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x7}, 0xd) 02:29:25 executing program 5: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000000)={0x2, "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"}, 0x401, 0x0) 02:29:25 executing program 1: pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040)={0xfffffffffffff71a}, &(0x7f0000000080), &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={&(0x7f0000000100)={[0x6]}, 0x8}) 02:29:25 executing program 2: socket(0xa, 0x0, 0x44672ad9) 02:29:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016e52000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:25 executing program 4: openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/card1/oss_mixer\x00', 0x24000, 0x0) [ 2217.305178][ T28] audit: type=1804 audit(1602037765.570:673): pid=13092 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3707/bus" dev="sda1" ino=16308 res=1 errno=0 [ 2217.388571][ T3646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2217.469104][T22839] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2217.479855][T22839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2217.519693][ T28] audit: type=1804 audit(1602037765.730:674): pid=13092 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3707/bus" dev="sda1" ino=16308 res=1 errno=0 02:29:25 executing program 2: syz_80211_join_ibss(0x0, 0x0, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000002280)) 02:29:25 executing program 1: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ubi_ctrl\x00', 0x200, 0x0) 02:29:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016e53000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:25 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0x4, 0x0, 0x4}, 0x40) 02:29:25 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(0x0, 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:29:26 executing program 4: syz_emit_ethernet(0x82, &(0x7f0000002000)={@dev, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "0a1722", 0x4c, 0x2f, 0x0, @local, @local, {[@fragment={0x2e}]}}}}}, 0x0) 02:29:26 executing program 2: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) write$proc_mixer(r0, 0x0, 0x0) 02:29:26 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000006400000064000000090000000700000602000004"], &(0x7f0000000280)=""/179, 0x85, 0xb3, 0x1}, 0x20) 02:29:26 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000001480)='/proc/slabinfo\x00', 0x0, 0x0) 02:29:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016e54000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:26 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000006400000064000000090000000700000002000006"], &(0x7f0000000280)=""/179, 0x85, 0xb3, 0x1}, 0x20) 02:29:26 executing program 4: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) [ 2218.108348][T15234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2218.119617][ T148] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2218.130343][ T148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:29:26 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:29:26 executing program 5: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x0, 0x0) read$fb(r0, 0x0, 0x0) 02:29:26 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0x5421, 0x0) 02:29:26 executing program 1: perf_event_open$cgroup(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x51c0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 02:29:26 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0x4020940d, &(0x7f0000000180)={0xc, 0x0, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "15e12073"}, 0x0, 0x0, @fd}) 02:29:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016e55000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:26 executing program 2: sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, 0x0, 0x0) [ 2218.396031][T13200] dlm: non-version read from control device 0 [ 2218.431080][ T3646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:29:26 executing program 4: ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self\x00', 0x82, 0x0) syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) 02:29:26 executing program 5: syz_emit_ethernet(0x1e, &(0x7f0000000080)={@remote, @link_local, @val, {@llc={0x4, {@snap={0x0, 0x0, 'K', "cdffa1"}}}}}, 0x0) 02:29:26 executing program 1: msgctl$MSG_STAT(0x0, 0xb, &(0x7f00000087c0)=""/239) msgctl$IPC_RMID(0x0, 0x0) 02:29:27 executing program 2: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={0x0, 0x0, 0xffce7759c603edd7}, 0x10) 02:29:27 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000040)) dup(r0) [ 2218.805952][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 2218.805966][ T28] audit: type=1804 audit(1602037767.070:679): pid=13204 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3709/bus" dev="sda1" ino=16337 res=1 errno=0 02:29:27 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000001200)='/dev/audio#\x00', 0x0, 0x0) mmap$snddsp_control(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000003, 0x10, r0, 0x83000000) 02:29:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016e56000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:27 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind(r0, &(0x7f0000001080)=@in6={0xa, 0x0, 0x0, @private0}, 0x80) 02:29:27 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000040)={0x7, 'vlan0\x00', {0x105d}}) 02:29:27 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:29:27 executing program 5: select(0xfffffffffffffec7, &(0x7f0000000040), &(0x7f0000000080), 0x0, 0x0) [ 2219.303333][T13249] nla_validate_range_unsigned: 10 callbacks suppressed [ 2219.303345][T13249] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:29:27 executing program 1: [ 2219.392987][T30535] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2219.405220][ T28] audit: type=1804 audit(1602037767.670:680): pid=13254 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3710/bus" dev="sda1" ino=16373 res=1 errno=0 [ 2219.435222][T13265] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:29:27 executing program 5: 02:29:27 executing program 2: 02:29:27 executing program 4: [ 2219.468572][ T2630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:29:27 executing program 1: [ 2219.593609][ T28] audit: type=1804 audit(1602037767.850:681): pid=13272 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3710/bus" dev="sda1" ino=16373 res=1 errno=0 02:29:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016e57000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:27 executing program 2: 02:29:28 executing program 4: 02:29:28 executing program 5: [ 2219.774308][ T28] audit: type=1804 audit(1602037767.990:682): pid=13272 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3710/bus" dev="sda1" ino=16373 res=1 errno=0 02:29:28 executing program 1: [ 2219.833163][T13285] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2219.961368][T13299] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:29:28 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r3 = dup(r2) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r5, 0xc0185879, 0x0) sendfile(r3, r4, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:29:28 executing program 4: 02:29:28 executing program 2: 02:29:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016e58000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:28 executing program 1: 02:29:28 executing program 5: 02:29:28 executing program 5: [ 2220.285224][T13315] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:29:28 executing program 1: 02:29:28 executing program 2: 02:29:28 executing program 4: [ 2220.376067][T13322] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:29:28 executing program 5: [ 2220.434461][ T28] audit: type=1804 audit(1602037768.700:683): pid=13329 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3711/bus" dev="sda1" ino=16337 res=1 errno=0 [ 2220.507994][ T2630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:29:28 executing program 1: [ 2220.689360][ T28] audit: type=1804 audit(1602037768.960:684): pid=13343 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3711/bus" dev="sda1" ino=16337 res=1 errno=0 [ 2220.771476][ T28] audit: type=1804 audit(1602037769.040:685): pid=13343 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3711/bus" dev="sda1" ino=16337 res=1 errno=0 02:29:29 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r3 = dup(r2) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r5, 0xc0185879, 0x0) sendfile(r3, r4, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:29:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016e59000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:29 executing program 1: 02:29:29 executing program 4: 02:29:29 executing program 2: 02:29:29 executing program 5: 02:29:29 executing program 1: 02:29:29 executing program 5: 02:29:29 executing program 4: [ 2220.988754][T13352] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:29:29 executing program 2: [ 2221.059003][ T28] audit: type=1804 audit(1602037769.330:686): pid=13354 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3712/bus" dev="sda1" ino=16151 res=1 errno=0 [ 2221.102455][T13360] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2221.147485][ T8284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2221.295257][ T28] audit: type=1804 audit(1602037769.560:687): pid=13371 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3712/bus" dev="sda1" ino=16151 res=1 errno=0 02:29:29 executing program 1: 02:29:29 executing program 4: [ 2221.416170][ T28] audit: type=1804 audit(1602037769.680:688): pid=13363 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3712/bus" dev="sda1" ino=16151 res=1 errno=0 [ 2221.548356][ T3646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:29:30 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r3 = dup(r2) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r5, 0xc0185879, 0x0) sendfile(r3, r4, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:29:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016e5a000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:30 executing program 2: 02:29:30 executing program 5: 02:29:30 executing program 1: 02:29:30 executing program 4: 02:29:30 executing program 1: [ 2221.980904][T13390] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:29:30 executing program 5: 02:29:30 executing program 2: 02:29:30 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "e794e42a"}, 0x0, 0x0, @planes=0x0}) [ 2222.117390][T13398] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:29:30 executing program 1: 02:29:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016e5b000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:30 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x0) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:29:30 executing program 5: 02:29:30 executing program 2: 02:29:30 executing program 1: 02:29:30 executing program 4: 02:29:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000035c000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) [ 2222.587726][T27517] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2222.588656][ T3646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:29:30 executing program 5: 02:29:31 executing program 1: 02:29:31 executing program 2: 02:29:31 executing program 4: 02:29:31 executing program 5: 02:29:31 executing program 1: 02:29:31 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x0) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:29:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016e5c000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:31 executing program 2: 02:29:31 executing program 4: 02:29:31 executing program 1: 02:29:31 executing program 5: [ 2223.227718][ T148] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2223.238452][ T148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:29:31 executing program 2: 02:29:31 executing program 4: 02:29:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016e5d000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:31 executing program 1: 02:29:31 executing program 5: 02:29:31 executing program 2: [ 2223.626940][ T3646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:29:32 executing program 5: 02:29:32 executing program 4: 02:29:32 executing program 1: 02:29:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016e5e000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:32 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x0) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:29:32 executing program 2: 02:29:32 executing program 4: [ 2223.867618][T30535] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2223.878380][T30535] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:29:32 executing program 5: 02:29:32 executing program 2: 02:29:32 executing program 1: [ 2223.996549][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 2223.996567][ T28] audit: type=1804 audit(1602037772.260:698): pid=13549 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3716/bus" dev="sda1" ino=16312 res=1 errno=0 02:29:32 executing program 4: 02:29:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016e5f000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:32 executing program 5: [ 2224.186980][ T8284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2224.232412][ T28] audit: type=1804 audit(1602037772.400:699): pid=13572 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3716/bus" dev="sda1" ino=16312 res=1 errno=0 02:29:32 executing program 2: 02:29:32 executing program 1: 02:29:32 executing program 4: [ 2224.361587][T13579] nla_validate_range_unsigned: 10 callbacks suppressed [ 2224.361601][T13579] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2224.439427][ T28] audit: type=1804 audit(1602037772.500:700): pid=13572 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3716/bus" dev="sda1" ino=16312 res=1 errno=0 [ 2224.550210][T13593] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2224.667428][T32026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:29:33 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x2007fff) sendfile(0xffffffffffffffff, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:29:33 executing program 5: 02:29:33 executing program 1: 02:29:33 executing program 2: 02:29:33 executing program 4: 02:29:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000000060000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:33 executing program 4: [ 2224.864186][T13609] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:29:33 executing program 5: 02:29:33 executing program 2: 02:29:33 executing program 1: [ 2224.944673][T13621] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2224.988400][ T28] audit: type=1804 audit(1602037773.260:701): pid=13622 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3717/bus" dev="sda1" ino=16309 res=1 errno=0 02:29:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016e60000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) [ 2225.088374][ T28] audit: type=1804 audit(1602037773.310:702): pid=13622 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3717/bus" dev="sda1" ino=16309 res=1 errno=0 02:29:33 executing program 2: [ 2225.147767][T27517] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration 02:29:33 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x2007fff) sendfile(0xffffffffffffffff, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:29:33 executing program 5: 02:29:33 executing program 4: 02:29:33 executing program 1: [ 2225.226405][T13639] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:29:33 executing program 2: [ 2225.278398][ T28] audit: type=1804 audit(1602037773.340:703): pid=13622 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3717/bus" dev="sda1" ino=16309 res=1 errno=0 [ 2225.325289][T13649] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:29:33 executing program 1: 02:29:33 executing program 4: [ 2225.360314][ T28] audit: type=1804 audit(1602037773.620:704): pid=13651 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3718/bus" dev="sda1" ino=15773 res=1 errno=0 02:29:33 executing program 5: 02:29:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016e61000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:33 executing program 2: [ 2225.498355][ T28] audit: type=1804 audit(1602037773.660:705): pid=13651 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3718/bus" dev="sda1" ino=15773 res=1 errno=0 02:29:33 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x2007fff) sendfile(0xffffffffffffffff, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:29:33 executing program 1: 02:29:33 executing program 4: [ 2225.605185][ T28] audit: type=1804 audit(1602037773.690:706): pid=13651 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3718/bus" dev="sda1" ino=15773 res=1 errno=0 02:29:33 executing program 5: [ 2225.661713][T13673] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:29:34 executing program 2: [ 2225.709747][ T3646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2225.718754][ T28] audit: type=1804 audit(1602037773.971:707): pid=13676 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3719/bus" dev="sda1" ino=16325 res=1 errno=0 02:29:34 executing program 1: 02:29:34 executing program 4: [ 2225.792060][T13688] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:29:34 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:29:34 executing program 5: 02:29:34 executing program 2: 02:29:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016e62000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:34 executing program 1: 02:29:34 executing program 4: 02:29:34 executing program 5: 02:29:34 executing program 2: 02:29:34 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:29:34 executing program 1: 02:29:34 executing program 4: [ 2226.128481][T13709] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:29:34 executing program 2: 02:29:34 executing program 5: 02:29:34 executing program 1: [ 2226.277702][T13725] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:29:34 executing program 2: 02:29:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016e63000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:34 executing program 5: 02:29:34 executing program 1: 02:29:34 executing program 4: 02:29:34 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, 0xffffffffffffffff, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:29:34 executing program 5: 02:29:34 executing program 2: 02:29:34 executing program 4: 02:29:34 executing program 1: 02:29:34 executing program 5: 02:29:35 executing program 4: 02:29:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016e64000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:35 executing program 2: [ 2226.747041][T32026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:29:35 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:29:35 executing program 1: 02:29:35 executing program 4: 02:29:35 executing program 5: 02:29:35 executing program 2: 02:29:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016e65000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:35 executing program 1: 02:29:35 executing program 5: 02:29:35 executing program 4: 02:29:35 executing program 2: 02:29:35 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:29:35 executing program 1: 02:29:35 executing program 4: [ 2227.226731][T25033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:29:35 executing program 2: 02:29:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016e66000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:35 executing program 5: 02:29:35 executing program 4: 02:29:35 executing program 1: 02:29:35 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:29:35 executing program 2: 02:29:35 executing program 5: 02:29:35 executing program 4: 02:29:35 executing program 1: 02:29:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016e67000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:35 executing program 2: 02:29:36 executing program 5: 02:29:36 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x0) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:29:36 executing program 4: 02:29:36 executing program 2: [ 2227.786743][ T3646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:29:36 executing program 1: 02:29:36 executing program 5: 02:29:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000000068000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:36 executing program 4: 02:29:36 executing program 2: 02:29:36 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x0) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:29:36 executing program 5: 02:29:36 executing program 1: 02:29:36 executing program 4: 02:29:36 executing program 2: 02:29:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016e68000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:36 executing program 5: 02:29:36 executing program 4: 02:29:36 executing program 1: 02:29:36 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x0) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:29:36 executing program 2: [ 2228.347239][T22839] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration 02:29:36 executing program 5: 02:29:36 executing program 4: 02:29:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000000369000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:36 executing program 5: 02:29:36 executing program 1: 02:29:36 executing program 2: 02:29:36 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x0, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:29:36 executing program 4: 02:29:37 executing program 5: 02:29:37 executing program 1: 02:29:37 executing program 2: 02:29:37 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016e69000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:37 executing program 4: [ 2228.826457][ T3646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:29:37 executing program 1: 02:29:37 executing program 2: [ 2228.998164][T22839] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2229.008894][T22839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:29:37 executing program 5: [ 2229.050886][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 2229.050902][ T28] audit: type=1804 audit(1602037777.321:739): pid=14007 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3729/bus" dev="sda1" ino=15785 res=1 errno=0 02:29:37 executing program 4: 02:29:37 executing program 1: 02:29:37 executing program 2: 02:29:37 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016e6a000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:37 executing program 5: 02:29:37 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x0, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:29:37 executing program 4: 02:29:37 executing program 1: [ 2229.391694][T14042] nla_validate_range_unsigned: 18 callbacks suppressed [ 2229.391706][T14042] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:29:37 executing program 5: 02:29:37 executing program 2: [ 2229.474077][ T28] audit: type=1804 audit(1602037777.741:740): pid=14045 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3730/bus" dev="sda1" ino=16383 res=1 errno=0 02:29:37 executing program 4: [ 2229.524060][T14052] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:29:37 executing program 1: [ 2229.627778][ T148] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2229.638518][ T148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2229.678099][ T28] audit: type=1804 audit(1602037777.941:741): pid=14060 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3730/bus" dev="sda1" ino=16383 res=1 errno=0 02:29:38 executing program 2: 02:29:38 executing program 5: 02:29:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016e6b000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:38 executing program 4: 02:29:38 executing program 1: [ 2229.858083][ T28] audit: type=1804 audit(1602037778.061:742): pid=14060 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3730/bus" dev="sda1" ino=16383 res=1 errno=0 [ 2229.882905][T32026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2229.976339][T14079] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2230.055376][T14086] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2230.266423][T25033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:29:38 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x0, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:29:38 executing program 4: 02:29:38 executing program 5: 02:29:38 executing program 2: 02:29:38 executing program 1: 02:29:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000006c000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) [ 2230.390649][T14107] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:29:38 executing program 2: 02:29:38 executing program 5: [ 2230.458899][T14120] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:29:38 executing program 4: 02:29:38 executing program 1: [ 2230.491681][ T28] audit: type=1804 audit(1602037778.761:743): pid=14110 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3731/bus" dev="sda1" ino=16081 res=1 errno=0 02:29:38 executing program 5: 02:29:38 executing program 4: [ 2230.661195][ T28] audit: type=1804 audit(1602037778.931:744): pid=14134 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3731/bus" dev="sda1" ino=16081 res=1 errno=0 [ 2230.821077][ T28] audit: type=1804 audit(1602037779.091:745): pid=14134 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3731/bus" dev="sda1" ino=16081 res=1 errno=0 [ 2230.906506][ T3646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2230.915576][T27517] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration 02:29:39 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x0, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:29:39 executing program 2: 02:29:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016e6c000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:39 executing program 1: 02:29:39 executing program 4: 02:29:39 executing program 5: 02:29:39 executing program 4: 02:29:39 executing program 1: 02:29:39 executing program 5: [ 2231.082481][T14146] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:29:39 executing program 2: 02:29:39 executing program 1: [ 2231.172072][ T28] audit: type=1804 audit(1602037779.441:746): pid=14148 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3732/bus" dev="sda1" ino=15905 res=1 errno=0 [ 2231.242444][T14159] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:29:39 executing program 4: [ 2231.400643][ T28] audit: type=1804 audit(1602037779.631:747): pid=14168 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3732/bus" dev="sda1" ino=15905 res=1 errno=0 [ 2231.535425][ T28] audit: type=1804 audit(1602037779.801:748): pid=14163 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3732/bus" dev="sda1" ino=15905 res=1 errno=0 02:29:39 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x0, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:29:39 executing program 5: 02:29:39 executing program 1: 02:29:39 executing program 2: 02:29:39 executing program 4: 02:29:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016e6d000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:40 executing program 4: 02:29:40 executing program 1: [ 2231.746803][T14187] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:29:40 executing program 2: 02:29:40 executing program 5: 02:29:40 executing program 4: [ 2231.849263][T14197] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:29:40 executing program 1: [ 2231.951231][ T3646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:29:40 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x0, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:29:40 executing program 2: 02:29:40 executing program 5: 02:29:40 executing program 1: 02:29:40 executing program 4: 02:29:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016e6e000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:40 executing program 5: 02:29:40 executing program 1: 02:29:40 executing program 4: 02:29:40 executing program 2: 02:29:40 executing program 5: 02:29:40 executing program 4: 02:29:41 executing program 1: 02:29:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016e6f000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:41 executing program 2: 02:29:41 executing program 5: 02:29:41 executing program 4: 02:29:41 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:29:41 executing program 5: 02:29:41 executing program 4: 02:29:41 executing program 1: 02:29:41 executing program 2: [ 2232.987140][ T2630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:29:41 executing program 5: 02:29:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016e70000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:41 executing program 4: 02:29:41 executing program 4: 02:29:41 executing program 1: 02:29:41 executing program 2: [ 2233.309406][T15234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:29:41 executing program 5: 02:29:41 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:29:41 executing program 4: 02:29:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016e71000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:41 executing program 1: 02:29:41 executing program 2: 02:29:41 executing program 5: 02:29:41 executing program 4: 02:29:42 executing program 2: 02:29:42 executing program 5: 02:29:42 executing program 1: 02:29:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016e72000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:42 executing program 4: [ 2234.026088][ T3646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2234.107133][ T148] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration 02:29:42 executing program 5: 02:29:42 executing program 2: 02:29:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016e73000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:42 executing program 1: 02:29:42 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:29:42 executing program 4: 02:29:42 executing program 2: 02:29:42 executing program 4: [ 2234.529634][T14397] nla_validate_range_unsigned: 10 callbacks suppressed [ 2234.529646][T14397] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:29:42 executing program 5: [ 2234.609375][T14409] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:29:42 executing program 1: [ 2234.651896][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 2234.651913][ T28] audit: type=1804 audit(1602037782.921:761): pid=14410 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3737/bus" dev="sda1" ino=16322 res=1 errno=0 02:29:43 executing program 2: [ 2234.748323][ T196] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2234.759048][ T196] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:29:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000000074000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:43 executing program 4: [ 2234.869062][ T28] audit: type=1804 audit(1602037783.101:762): pid=14426 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3737/bus" dev="sda1" ino=16322 res=1 errno=0 02:29:43 executing program 5: 02:29:43 executing program 1: 02:29:43 executing program 5: [ 2235.067033][T32026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2235.112366][T14435] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2235.125510][ T28] audit: type=1804 audit(1602037783.261:763): pid=14424 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3737/bus" dev="sda1" ino=16322 res=1 errno=0 02:29:43 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:29:43 executing program 4: 02:29:43 executing program 2: 02:29:43 executing program 5: 02:29:43 executing program 1: [ 2235.229082][T14442] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:29:43 executing program 2: 02:29:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016e74000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:43 executing program 5: 02:29:43 executing program 4: [ 2235.387145][T27517] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2235.397875][T27517] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:29:43 executing program 1: [ 2235.423193][ T28] audit: type=1804 audit(1602037783.691:764): pid=14464 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3738/bus" dev="sda1" ino=15776 res=1 errno=0 02:29:43 executing program 2: [ 2235.491044][T14469] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2235.601961][T14477] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2235.631226][ T28] audit: type=1804 audit(1602037783.901:765): pid=14470 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3738/bus" dev="sda1" ino=15776 res=1 errno=0 02:29:43 executing program 4: 02:29:44 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:29:44 executing program 5: 02:29:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016e75000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:44 executing program 1: 02:29:44 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, &(0x7f0000000400)) [ 2235.855917][ T28] audit: type=1804 audit(1602037783.961:766): pid=14470 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3738/bus" dev="sda1" ino=15776 res=1 errno=0 02:29:44 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @rand_addr, {[@ra={0x94, 0x4}]}}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @empty}, "a6b8b059"}}}}}, 0x0) 02:29:44 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@dev}, 0x20) [ 2235.954455][ T28] audit: type=1804 audit(1602037784.221:767): pid=14500 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3739/bus" dev="sda1" ino=16342 res=1 errno=0 [ 2235.982877][T14501] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2236.037652][T27517] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration 02:29:44 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000000), 0x4) [ 2236.090727][T14511] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2236.105805][ T1216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:29:44 executing program 2: keyctl$search(0xa, 0x0, &(0x7f0000001980)='user\x00', 0x0, 0xfffffffffffffff9) [ 2236.162691][ T28] audit: type=1804 audit(1602037784.431:768): pid=14510 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3739/bus" dev="sda1" ino=16342 res=1 errno=0 [ 2236.305233][ T28] audit: type=1804 audit(1602037784.572:769): pid=14510 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3739/bus" dev="sda1" ino=16342 res=1 errno=0 02:29:44 executing program 4: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000008cc0)='ns/pid\x00') [ 2236.347346][T25033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:29:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016e76000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:44 executing program 5: prctl$PR_GET_TIMERSLACK(0x8) [ 2236.465950][T14535] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2236.569657][T14546] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:29:45 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:29:45 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f00000014c0), 0x4) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000040)) 02:29:45 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x88, 0x484, 0x0, 0x0) 02:29:45 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) 02:29:45 executing program 5: syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @rand_addr=0x64010100}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @empty}}}}}}, 0x0) 02:29:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016e77000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:45 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000000c0)={@private1}, 0x14) 02:29:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000240)) 02:29:45 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000040)) [ 2236.953770][ T28] audit: type=1804 audit(1602037785.222:770): pid=14587 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3740/bus" dev="sda1" ino=16306 res=1 errno=0 02:29:45 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, 0x0) 02:29:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016e78000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:45 executing program 1: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@cgroup, 0xffffffffffffffff, 0x25}, 0x10) [ 2237.145828][ T1216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:29:45 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, 0x0, 0x0) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:29:45 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000500)) 02:29:45 executing program 5: mq_open(&(0x7f00000011c0)=',+\x00', 0x0, 0x0, &(0x7f0000001200)) 02:29:45 executing program 2: 02:29:45 executing program 1: 02:29:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016e79000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:45 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x3}, 0x40) 02:29:45 executing program 1: io_setup(0x0, &(0x7f0000002140)) 02:29:45 executing program 4: socketpair(0x28, 0x0, 0x400, &(0x7f00000000c0)) 02:29:45 executing program 5: prctl$PR_GET_TIMERSLACK(0x29) 02:29:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000007a000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:45 executing program 2: r0 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key(&(0x7f0000000080)='asymmetric\x00', 0x0, &(0x7f00000002c0)="c1", 0x1, r1) 02:29:46 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, 0x0, 0x0) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:29:46 executing program 4: prctl$PR_GET_TIMERSLACK(0x16) 02:29:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt(r0, 0x0, 0x0, 0x0, 0x0) 02:29:46 executing program 5: io_setup(0xb11e, &(0x7f0000002140)=0x0) io_pgetevents(r0, 0x7fff, 0x0, 0x0, 0x0, 0x0) 02:29:46 executing program 2: openat$procfs(0xffffff9c, &(0x7f0000000440)='/proc/slabinfo\x00', 0x0, 0x0) 02:29:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016e7a000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:46 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000002340)={'erspan0\x00', 0x0}) [ 2238.185634][T32026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:29:46 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={0x0, @xdp, @hci, @sco={0x1f, @fixed}, 0x0, 0x0, 0x0, 0x0, 0xfffd}) 02:29:46 executing program 4: io_setup(0x3, &(0x7f0000000000)=0x0) io_pgetevents(r0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={[0x5d]}, 0x8}) 02:29:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016e7b000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:46 executing program 1: prctl$PR_GET_TIMERSLACK(0x21) 02:29:46 executing program 2: mq_notify(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x1e, 0x4, @thr={&(0x7f0000000040)="06b6d42e4145d823f0d2561cbd7ef84411f9242d7d03270b6440a3eaa30eaa003da88b4224bd2e71dc5446f99487be8a28c2bf9f07d06a58b27708aa2fd497892b80f04865128d27d3be2cc03fb266f457790619c5b21436434dc97041ea3b5798ca71de628fd3cd8c64ef758c541536bc6c3ac3cf67a8e53916385c9ddcbfa3ffe09203ffcfb03c18aff3ac66", &(0x7f0000000100)="9d4d489790ea0ca0ac62005099ff2887b30fc88bc03aedce17dcba4c0bdd54ebcae6106359d1c989318d79c26e6213e0ad7934c147601c27c5b153c94002cd431e0df8f8e11c94c2bf92e173ad7b0890b9ba69e738ed76a94e968a9c1b6a34e8981dc95d827b8bb8a76f8a0b31e4459a2c5d98d96448897da2a733dcbe399e965bc5d65d7c67d6d576eaa7e1b8795bcc1e88e7a4e247ffcd542c40af0c47c859f471af32ad7b041b095cc2bf7e08fad18f5187f5aea9e98b3fa255a29968b2abafc0b479fc86555de3a8"}}) getresuid(&(0x7f0000001300), 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f00000014c0)={0x3}, 0x4) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'batadv0\x00', {0x3}, 0x401}) 02:29:47 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, 0x0, 0x0) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:29:47 executing program 5: bpf$MAP_CREATE(0x22, &(0x7f0000002100), 0x40) 02:29:47 executing program 4: rt_sigaction(0x2b, 0x0, 0x0, 0x8, &(0x7f0000001b80)) 02:29:47 executing program 1: setresuid(0x0, 0xee01, 0x0) setresuid(0x0, 0x0, 0x0) 02:29:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016e7c000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:47 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0xb050bfb79afc5ca7, 0x4) 02:29:47 executing program 4: prctl$PR_GET_TIMERSLACK(0x67) 02:29:47 executing program 5: add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, r0) 02:29:47 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x2, &(0x7f0000000180)=@raw=[@exit, @generic={0x5, 0x0, 0x0, 0x100}], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x9f, &(0x7f0000000200)=""/159, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 02:29:47 executing program 1: mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x202d, 0x0, @thr={0x0, 0x0}}) 02:29:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016e7d000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:47 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb], 0x4000}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000400)=ANY=[@ANYBLOB="070f33eb"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) [ 2239.227633][ T196] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2239.240107][T32026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2239.401264][T25033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:29:48 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:29:48 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0x0, 0x0, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 02:29:48 executing program 1: setfsuid(0xee01) 02:29:48 executing program 2: openat$bsg(0xffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x400, 0x0) 02:29:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016e7e000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:48 executing program 4: r0 = eventfd2(0x0, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000340)={0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 02:29:48 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$describe(0x6, r0, &(0x7f0000000080)=""/208, 0xd0) 02:29:48 executing program 4: [ 2239.897328][T14868] nla_validate_range_unsigned: 16 callbacks suppressed [ 2239.897341][T14868] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:29:48 executing program 2: 02:29:48 executing program 5: [ 2239.988911][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 2239.988929][ T28] audit: type=1804 audit(1602037788.262:782): pid=14869 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3744/bus" dev="sda1" ino=15785 res=1 errno=0 [ 2240.071299][T14885] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:29:48 executing program 2: [ 2240.233540][ T28] audit: type=1804 audit(1602037788.412:783): pid=14887 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3744/bus" dev="sda1" ino=15785 res=1 errno=0 02:29:48 executing program 5: [ 2240.276915][ T3646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2240.339389][ T28] audit: type=1804 audit(1602037788.542:784): pid=14878 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3744/bus" dev="sda1" ino=15785 res=1 errno=0 02:29:48 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:29:48 executing program 5: 02:29:48 executing program 1: 02:29:48 executing program 4: 02:29:48 executing program 2: 02:29:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016e7f000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:48 executing program 1: [ 2240.537441][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2240.548230][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:29:48 executing program 2: [ 2240.599957][T14905] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:29:48 executing program 4: 02:29:48 executing program 5: [ 2240.694646][T14914] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2240.712466][ T28] audit: type=1804 audit(1602037788.982:785): pid=14910 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3745/bus" dev="sda1" ino=16314 res=1 errno=0 02:29:49 executing program 1: 02:29:49 executing program 4: [ 2240.963052][ T28] audit: type=1804 audit(1602037789.232:786): pid=14933 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3745/bus" dev="sda1" ino=16314 res=1 errno=0 [ 2241.073730][ T28] audit: type=1804 audit(1602037789.342:787): pid=14933 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3745/bus" dev="sda1" ino=16314 res=1 errno=0 [ 2241.147578][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2241.158340][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2241.167555][T27517] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration 02:29:49 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:29:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016e80000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:49 executing program 5: 02:29:49 executing program 2: 02:29:49 executing program 1: 02:29:49 executing program 4: 02:29:49 executing program 5: 02:29:49 executing program 2: 02:29:49 executing program 1: [ 2241.304836][T14943] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2241.329816][ T3646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:29:49 executing program 4: [ 2241.389707][ T28] audit: type=1804 audit(1602037789.662:788): pid=14944 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3746/bus" dev="sda1" ino=15785 res=1 errno=0 [ 2241.434209][T14947] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:29:49 executing program 5: [ 2241.611199][ T28] audit: type=1804 audit(1602037789.882:789): pid=14957 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3746/bus" dev="sda1" ino=15785 res=1 errno=0 02:29:49 executing program 2: [ 2241.769762][ T28] audit: type=1804 audit(1602037790.032:790): pid=14957 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3746/bus" dev="sda1" ino=15785 res=1 errno=0 02:29:50 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(0xffffffffffffffff) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:29:50 executing program 4: 02:29:50 executing program 1: 02:29:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016e81000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:50 executing program 2: [ 2241.990635][T14978] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:29:50 executing program 1: [ 2242.050124][T14987] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2242.074862][ T28] audit: type=1804 audit(1602037790.342:791): pid=14986 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3747/bus" dev="sda1" ino=16306 res=1 errno=0 02:29:50 executing program 4: 02:29:50 executing program 5: 02:29:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016e82000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:50 executing program 2: 02:29:50 executing program 5: [ 2242.300922][T15009] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2242.382534][T32026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2242.429277][T25033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2242.436439][T15016] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:29:50 executing program 2: 02:29:50 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(0xffffffffffffffff) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:29:50 executing program 1: 02:29:50 executing program 4: 02:29:50 executing program 5: 02:29:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016e83000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:50 executing program 2: 02:29:51 executing program 4: 02:29:51 executing program 5: 02:29:51 executing program 1: 02:29:51 executing program 2: 02:29:51 executing program 5: 02:29:51 executing program 4: 02:29:51 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(0xffffffffffffffff) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:29:51 executing program 5: 02:29:51 executing program 1: 02:29:51 executing program 4: 02:29:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016e84000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:51 executing program 2: 02:29:51 executing program 5: r0 = add_key(&(0x7f0000000080)='cifs.spnego\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$revoke(0x3, r0) 02:29:51 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000080)={0x0, 0x0, "d68a0a", 0x4}) 02:29:51 executing program 4: syz_mount_image$xfs(0x0, 0x0, 0x0, 0x2, &(0x7f0000001500)=[{0x0, 0x0, 0x5}, {&(0x7f00000012c0)='\b', 0x1}], 0x800000, &(0x7f0000001580)={[{@wsync='wsync'}, {@filestreams='filestreams'}], [{@fowner_gt={'fowner>'}}, {@hash='hash'}, {@func={'func', 0x3d, 'CREDS_CHECK'}}]}) syz_genetlink_get_family_id$gtp(0x0) 02:29:51 executing program 1: syz_genetlink_get_family_id$nl80211(0x0) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000046c0)='/proc/tty/drivers\x00', 0x0, 0x0) [ 2243.393345][ T1216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:29:51 executing program 2: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x58}}, 0x0) 02:29:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016e85000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:52 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(0x0, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:29:52 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f00000007c0), &(0x7f0000000800)=0x4) 02:29:52 executing program 5: 02:29:52 executing program 2: epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000004200), 0x8) 02:29:52 executing program 1: process_vm_writev(0x0, &(0x7f0000001780)=[{&(0x7f0000001740)=""/25, 0x19}], 0x1, &(0x7f0000001e00)=[{0x0}, {0x0}], 0x2, 0x0) 02:29:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016e86000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:52 executing program 2: syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x0, 0x0) 02:29:52 executing program 5: openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0xa4483, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/autofs\x00', 0x0, 0x0) 02:29:52 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) finit_module(r0, 0x0, 0x0) 02:29:52 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) syncfs(r0) [ 2244.425187][ T3646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:29:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016e87000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:52 executing program 2: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00') ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) 02:29:53 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(0x0, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:29:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x66, 0x0, &(0x7f00000000c0)) 02:29:53 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000100), 0x4) 02:29:53 executing program 5: syslog(0x3, &(0x7f0000000000)=""/140, 0x8c) 02:29:53 executing program 2: add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)="a7", 0x1, 0xfffffffffffffffd) 02:29:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016e88000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:53 executing program 4: r0 = syz_open_dev$char_raw(&(0x7f0000000000)='/dev/raw/raw#\x00', 0x0, 0xca2c0) write$char_raw(r0, &(0x7f0000009a00)=ANY=[@ANYBLOB="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"/22538], 0x5800) ioctl$CHAR_RAW_FLSBUF(r0, 0x1261, &(0x7f0000000040)=0x4) r1 = socket(0x6, 0x0, 0x0) write$char_raw(r0, &(0x7f0000005a00)={"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"}, 0x4000) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x200}, @ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0x6}, @ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0x35a}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x7}, @ETHTOOL_A_COALESCE_RX_USECS={0x8}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x1}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0xfa57}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008000}, 0x10) 02:29:53 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) accept4$packet(r0, 0x0, 0x0, 0x80800) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0)='IPVS\x00') [ 2244.985573][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2245.002015][T15216] nla_validate_range_unsigned: 10 callbacks suppressed [ 2245.002026][T15216] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2245.028976][ T28] kauditd_printk_skb: 10 callbacks suppressed 02:29:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f00000004c0)='SMC_PNETID\x00') sendmsg$SMC_PNETID_DEL(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01"], 0x14}}, 0x0) [ 2245.028993][ T28] audit: type=1804 audit(1602037793.302:802): pid=15215 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3751/bus" dev="sda1" ino=16319 res=1 errno=0 [ 2245.057988][T15223] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:29:53 executing program 4: r0 = socket(0x11, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000340)={'tunl0\x00', &(0x7f0000000080)=ANY=[]}) [ 2245.323836][ T28] audit: type=1804 audit(1602037793.592:803): pid=15225 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3751/bus" dev="sda1" ino=16319 res=1 errno=0 02:29:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000a088000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:53 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGUNIQ(r0, 0x80404508, 0x0) [ 2245.449566][T15253] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2245.465740][T25033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2245.473858][T25033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2245.522220][T15265] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:29:54 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(0x0, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:29:54 executing program 1: openat$char_raw_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/raw/rawctl\x00', 0xca381, 0x0) 02:29:54 executing program 4: syz_mount_image$xfs(0x0, 0x0, 0x0, 0x2, &(0x7f0000001500)=[{&(0x7f00000002c0), 0x0, 0x5}, {&(0x7f00000012c0)='\b', 0x1}], 0x800000, &(0x7f0000001580)={[{@wsync='wsync'}, {@grpid='grpid'}, {@filestreams='filestreams'}], [{@fowner_gt={'fowner>'}}, {@obj_role={'obj_role', 0x3d, '-\\.^'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/bus/usb/00#/00#\x00'}}, {@hash='hash'}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'CREDS_CHECK'}}]}) syz_genetlink_get_family_id$gtp(&(0x7f00000016c0)='gtp\x00') 02:29:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016e89000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:54 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000840)='/dev/zero\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) 02:29:54 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x1f}]}) 02:29:54 executing program 5: socketpair(0x1a, 0x0, 0x0, 0x0) [ 2245.933520][T15287] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:29:54 executing program 2: r0 = socket(0x11, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}) 02:29:54 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_DISCONNECT(r0, 0xab08) [ 2245.991260][ T28] audit: type=1804 audit(1602037794.262:804): pid=15289 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3752/bus" dev="sda1" ino=16304 res=1 errno=0 02:29:54 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, 0x0) [ 2246.051098][T15296] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:29:54 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x9) [ 2246.249659][T15318] block nbd4: NBD_DISCONNECT [ 2246.264706][ T28] audit: type=1804 audit(1602037794.532:805): pid=15305 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3752/bus" dev="sda1" ino=16304 res=1 errno=0 02:29:54 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, 0x0) [ 2246.291608][ T148] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2246.302335][ T148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:29:54 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:29:54 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x1, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'U+'}, 0x16, 0x0) 02:29:54 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000002c0)=[{}, {}], 0x10) 02:29:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016e8a000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:54 executing program 4: syz_mount_image$ocfs2(&(0x7f0000000000)='ocfs2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000001440), 0x2010, &(0x7f0000001500)) 02:29:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f00000002c0)) [ 2246.513191][T32026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:29:54 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={0x0, 0x5c}}, 0x0) 02:29:54 executing program 2: pipe2$9p(&(0x7f0000003440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RWSTAT(r0, &(0x7f0000003480)={0x7}, 0x7) [ 2246.656174][T15334] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:29:55 executing program 4: syz_mount_image$ocfs2(&(0x7f0000000000)='ocfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000540)) [ 2246.699925][ T28] audit: type=1804 audit(1602037794.972:806): pid=15336 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3753/bus" dev="sda1" ino=16367 res=1 errno=0 02:29:55 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) recvmsg(r0, &(0x7f0000000a40)={&(0x7f0000000880)=@ethernet, 0x80, 0x0}, 0x0) [ 2246.767665][T15343] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2246.898877][ T28] audit: type=1804 audit(1602037795.163:807): pid=15351 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3753/bus" dev="sda1" ino=16367 res=1 errno=0 [ 2246.929362][T22839] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2246.940117][T22839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:29:55 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000004640)='/dev/video#\x00', 0x0, 0x2) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000004680)) [ 2246.950732][ T148] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration 02:29:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016e8b000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) [ 2247.114656][ T28] audit: type=1804 audit(1602037795.333:808): pid=15366 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3753/bus" dev="sda1" ino=16367 res=1 errno=0 02:29:55 executing program 2: openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}}, 0x90) 02:29:55 executing program 4: add_key$user(&(0x7f0000000380)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) 02:29:55 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r0, 0x80044dfe, &(0x7f0000000240)) 02:29:55 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) [ 2247.218676][T15372] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2247.298047][T15385] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:29:55 executing program 4: openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x80200, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000000d40)='nl80211\x00') openat$full(0xffffffffffffff9c, &(0x7f0000000f80)='/dev/full\x00', 0x101040, 0x0) 02:29:55 executing program 2: syz_mount_image$ocfs2(&(0x7f0000000000)='ocfs2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2010, &(0x7f0000001500)) 02:29:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016e8c000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:55 executing program 1: ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) [ 2247.397825][ T28] audit: type=1804 audit(1602037795.673:809): pid=15402 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3754/bus" dev="sda1" ino=16384 res=1 errno=0 [ 2247.553350][ T3646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2247.645655][ T28] audit: type=1804 audit(1602037795.893:810): pid=15404 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3754/bus" dev="sda1" ino=16384 res=1 errno=0 02:29:55 executing program 2: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0xa, r0, &(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, r0) [ 2247.711053][ T28] audit: type=1804 audit(1602037795.963:811): pid=15408 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3754/bus" dev="sda1" ino=16384 res=1 errno=0 02:29:56 executing program 5: syz_open_dev$mouse(&(0x7f0000000a80)='/dev/input/mouse#\x00', 0x0, 0x20400) 02:29:56 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 02:29:56 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x17, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_ident={0x2}]}, 0x20}}, 0x0) 02:29:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="01"], 0x24}}, 0x0) 02:29:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016e8d000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:56 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:29:56 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x2, &(0x7f0000000180), 0x0, 0x0) 02:29:56 executing program 2: r0 = socket(0x11, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x7, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @rand_addr, @remote, {[@cipso={0x86, 0x6}]}}}}}) 02:29:56 executing program 5: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={[], [{@smackfsdef={'smackfsdef', 0x3d, '@'}}]}) syz_mount_image$vfat(0x0, 0x0, 0x0, 0xaaaaaaaaaaaadfb, &(0x7f0000000200)=[{&(0x7f0000000000)=')', 0x1, 0x100000000000401}, {&(0x7f0000000380)="12844c745f23015ee5063d3f584b9b637e224c03adb04dcbb063a6dedbf5761f4417ccf0708deadf2d0c1c53d1299d5b2c60d0ac878fce9b5be10ecc212a8b3fcee407cbcb201bac62c90b7a39d3389279806980c1357a7b9764da7a3f52f571c46a04ae762e0e4c8950ec3304d3efa1cdcd890a857429159b744d4aa8b1c94622f62e696e7b5ec31fdceca12897e39b4653786fde53f143dc02e7b02c0804d723f3ab10138186aceabcd7b5a93780ef27005c6f3abd3434f44f23c3700254798b0d9a2e00b12d6e90895db171678d4a86e11894603052eb74679ae7378648af8c0c841a", 0x34}], 0x1000, 0x0) 02:29:56 executing program 4: fanotify_mark(0xffffffffffffffff, 0x31, 0x1, 0xffffffffffffffff, 0x0) 02:29:56 executing program 1: r0 = socket(0xa, 0x2, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x0, 0x0, 0x0) 02:29:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016e8e000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:56 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @loopback, {[@timestamp_prespec={0x44, 0x4}]}}}}}) 02:29:56 executing program 4: r0 = socket(0x11, 0x2, 0x0) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0xffffffffffffff91) 02:29:56 executing program 2: r0 = socket(0x18, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) [ 2248.516841][T15234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2248.526064][T22839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2248.537032][ T2479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2248.546703][T32026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:29:56 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x22) [ 2248.592829][ T3646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:29:57 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000180)={0xc4, 0x0, 'client1\x00', 0x0, "c78e09a9b14e5cca", "af99c9318251e0014db0bd673e661e5cd765a194741f1ec35a3f6d4fdee29e3c"}) 02:29:57 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:29:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016e8f000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000900)='l2tp\x00') 02:29:57 executing program 4: process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 02:29:57 executing program 5: pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x500000b, 0xffffffffffffffff) 02:29:57 executing program 5: r0 = socket(0x11, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000780)={'gre0\x00', &(0x7f0000000700)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @multicast2}}}}) 02:29:57 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) 02:29:57 executing program 2: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) shmctl$IPC_RMID(r0, 0x0) shmctl$SHM_STAT(r0, 0xd, 0x0) 02:29:57 executing program 5: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001100)='/proc/self/net/pfkey\x00', 0x44003, 0x0) socket(0x5, 0x0, 0x0) 02:29:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016e90000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x1, 0x0, &(0x7f0000000680)) 02:29:57 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) recvmsg(r0, &(0x7f0000002400)={0x0, 0x0, 0x0}, 0x40000021) [ 2249.632835][ T3646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:29:58 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:29:58 executing program 1: syz_mount_image$ocfs2(&(0x7f0000000000)='ocfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x10801, &(0x7f0000000540)={[{}, {'#.'}]}) 02:29:58 executing program 4: openat$char_raw_ctl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/raw/rawctl\x00', 0x5a446a78f8bf4a45, 0x0) 02:29:58 executing program 2: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) 02:29:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000000391000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:58 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x0) fstatfs(r0, &(0x7f0000000040)=""/73) 02:29:58 executing program 4: openat$pfkey(0xffffffffffffff9c, &(0x7f0000001100)='/proc/self/net/pfkey\x00', 0x0, 0x0) 02:29:58 executing program 2: r0 = socket(0xa, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRESHEX]}) 02:29:58 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x17, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, [@sadb_x_sa2={0x2}, @sadb_ident={0x2}]}, 0x30}}, 0x0) 02:29:58 executing program 1: syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/ip6_flowlabel\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14}, 0x14}}, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/dlm-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000880)='NLBL_CIPSOv4\x00') syz_genetlink_get_family_id$l2tp(&(0x7f0000000900)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14}, 0x14}}, 0x0) 02:29:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016e91000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) [ 2250.132269][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 2250.132286][ T28] audit: type=1804 audit(1602037798.393:819): pid=15628 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3757/bus" dev="sda1" ino=16384 res=1 errno=0 02:29:58 executing program 2: socketpair(0x25, 0x5, 0xfffffffb, 0x0) [ 2250.330777][ T28] audit: type=1804 audit(1602037798.493:820): pid=15628 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3757/bus" dev="sda1" ino=16384 res=1 errno=0 [ 2250.373142][T15640] nla_validate_range_unsigned: 12 callbacks suppressed [ 2250.374115][T15640] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:29:58 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100250248ff050005001201", 0x2e}], 0x1}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:29:58 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) 02:29:58 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) recvmsg(r0, &(0x7f0000002400)={0x0, 0x0, 0x0, 0x60, 0x0, 0xfffffffffffffe35}, 0x0) 02:29:58 executing program 5: syz_open_dev$audion(&(0x7f0000000240)='/dev/audio#\x00', 0x8d, 0x0) [ 2250.476236][T15652] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:29:58 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000012c0)={'vxcan1\x00'}) 02:29:58 executing program 4: getitimer(0x0, &(0x7f0000000080)) 02:29:58 executing program 1: syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0xc000) [ 2250.631100][ T28] audit: type=1804 audit(1602037798.903:821): pid=15672 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3758/bus" dev="sda1" ino=16342 res=1 errno=0 02:29:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016e92000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) [ 2250.673140][ T3646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2250.745923][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2250.843329][ T28] audit: type=1804 audit(1602037799.013:822): pid=15674 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3758/bus" dev="sda1" ino=16342 res=1 errno=0 02:29:59 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r0) 02:29:59 executing program 2: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1f, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) syz_mount_image$xfs(&(0x7f0000000240)='xfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f0000001500)=[{&(0x7f0000001380)="80abee1ae851f3c5e87d8ba86f9a5cecc47ba65391df027d3aa4ae344ce1fe0d1671b1b06ed9e0589de126665b1e3add6531c61101b32c8c5bbba152aa1048cc4353811b16fe537ce935e4a783719bf00d17badff5bdb4d97815ac8802d34defc8d78a538570939eeaeb76f47fc7f868dfe5252b091513f23336", 0x7a, 0x240000000}], 0x800000, &(0x7f0000001580)={[{@wsync='wsync'}, {@grpid='grpid'}, {@filestreams='filestreams'}], [{@fowner_gt={'fowner>'}}, {@obj_role={'obj_role', 0x3d, '-\\.^'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/bus/usb/00#/00#\x00'}}, {@hash='hash'}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@appraise_type='appraise_type=imasig'}]}) 02:29:59 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCATTACH(r0, 0x4004743d, 0x0) 02:29:59 executing program 4: r0 = socket(0x11, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'gre0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="c91b37cae8b4530bc046e9eb23ddaa3d85d26fa3818a5f"]}) [ 2250.968963][T15681] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2251.018946][ T28] audit: type=1804 audit(1602037799.113:823): pid=15674 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3758/bus" dev="sda1" ino=16342 res=1 errno=0 [ 2251.075585][T15691] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:29:59 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, 0x0, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:29:59 executing program 2: socketpair(0x0, 0xf, 0x0, 0x0) 02:29:59 executing program 1: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @local}}}}) 02:29:59 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f00000002c0)=@random={'system.', ']$.&%-@+&+\xc1[#-\xc8\x00'}, 0x0, 0x0, 0x0) 02:29:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016e93000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:29:59 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg(r0, &(0x7f0000001680)={0x0, 0x0, 0x0}, 0x0) [ 2251.539894][T15717] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2251.544916][T22839] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2251.559504][T22839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:29:59 executing program 2: keyctl$dh_compute(0x17, &(0x7f0000000540), 0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={'cmac(sm4-ce)\x00'}}) 02:29:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) connect$netlink(r0, &(0x7f0000000180)=@proc, 0xc) 02:29:59 executing program 1: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000480)='/dev/dlm-control\x00', 0x1b3000, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000002340)='/dev/dlm-control\x00', 0xc800, 0x0) [ 2251.606290][T15728] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2251.625303][T25033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2251.691435][ T28] audit: type=1804 audit(1602037799.963:824): pid=15734 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3759/bus" dev="sda1" ino=16305 res=1 errno=0 02:30:00 executing program 5: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd40}, 0x0) 02:30:00 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x9ab8) 02:30:00 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, 0x0, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:30:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016e94000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) [ 2251.845559][ T28] audit: type=1804 audit(1602037800.013:825): pid=15734 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3759/bus" dev="sda1" ino=16305 res=1 errno=0 [ 2251.922354][ T28] audit: type=1804 audit(1602037800.033:826): pid=15734 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3759/bus" dev="sda1" ino=16305 res=1 errno=0 02:30:00 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x48, &(0x7f0000000240)={[{@utf8='utf8=1'}], [{@defcontext={'defcontext', 0x3d, 'staff_u'}}]}) [ 2251.981133][T15764] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:30:00 executing program 1: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x2, &(0x7f0000001440)=[{&(0x7f0000000340)="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", 0xffb, 0x6}, {&(0x7f0000001380)='O', 0x1, 0x100000000}], 0x0, 0x0) [ 2252.031959][ T28] audit: type=1804 audit(1602037800.293:827): pid=15765 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3760/bus" dev="sda1" ino=16384 res=1 errno=0 [ 2252.063404][T15746] could not allocate digest TFM handle cmac(sm4-ce) [ 2252.095830][T15772] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2252.134509][T15746] could not allocate digest TFM handle cmac(sm4-ce) [ 2252.223377][ T28] audit: type=1804 audit(1602037800.463:828): pid=15773 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3760/bus" dev="sda1" ino=16384 res=1 errno=0 02:30:00 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, &(0x7f0000001180)) 02:30:00 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f00000000c0)={0x2020, 0x0, 0x0}, 0x2020) read$FUSE(r0, 0x0, 0x0) write$FUSE_BMAP(r0, &(0x7f0000002100)={0x18, 0x0, r2}, 0x18) 02:30:00 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000200)) 02:30:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016e95000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:30:00 executing program 5: syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x4, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0) socketpair(0x0, 0x800, 0x101, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000006c0)='batadv\x00') openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x408200, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000980)='batadv\x00') syz_open_dev$mouse(&(0x7f0000000a80)='/dev/input/mouse#\x00', 0x40, 0x20400) 02:30:00 executing program 2: io_setup(0x2, &(0x7f0000000100)) io_setup(0x3, &(0x7f0000000000)=0x0) io_setup(0x5, &(0x7f0000000040)) io_destroy(r0) [ 2252.555464][T15808] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:30:00 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, 0x0) [ 2252.610739][T15815] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2252.664785][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2252.667001][ T148] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2252.675508][ T59] net_ratelimit: 1 callbacks suppressed [ 2252.675516][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:30:01 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) accept4$nfc_llcp(r0, 0x0, 0x0, 0x0) [ 2252.744474][T32026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:30:01 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, 0x0, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:30:01 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) connect(r0, &(0x7f0000000000)=@generic={0x0, "2047d95eb53cb4a0f95cf19761df11605bebe414d1923a1e086811a45d79818269273094283ab0755398487b8c57d39a3a1c44aa3504f93469a6435977d725487693c6c923bef3dc7ae1819239204baf38639924c02933ffdbb9063028f5806af587db6bae8d783829d7d6a68d40d9d13e45250c4a89cb9a7c9644901bdd"}, 0x80) 02:30:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016e96000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:30:01 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f0000000240)=""/206) 02:30:01 executing program 2: pipe2(&(0x7f00000000c0), 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000300)='gtp\x00') 02:30:01 executing program 4: syz_mount_image$xfs(&(0x7f0000000240)='xfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)) 02:30:01 executing program 2: syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x101000) 02:30:01 executing program 5: process_vm_readv(0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/75, 0x4b}], 0x1, &(0x7f00000036c0)=[{&(0x7f00000026c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x0) 02:30:01 executing program 1: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) 02:30:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016e97000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:30:01 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @loopback}}}}) 02:30:01 executing program 2: openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x189000, 0x0) 02:30:01 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:30:01 executing program 1: process_vm_writev(0x0, &(0x7f0000001780)=[{&(0x7f0000001740)=""/25, 0x19}], 0x1, 0x0, 0x0, 0x0) 02:30:01 executing program 5: bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) 02:30:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016e98000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:30:01 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x4e21, @dev}, 0x10) 02:30:01 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, &(0x7f0000000000)=0xfffffffffffffc7e) [ 2253.676182][T15917] RDS: rds_bind could not find a transport for ::ffff:172.20.20.0, load rds_tcp or rds_rdma? 02:30:02 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f0000000140)={{0x0}, 0x0}, 0x20) 02:30:02 executing program 5: clock_getres(0x57f69279772328f1, 0x0) 02:30:02 executing program 1: socketpair(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000006c0)='batadv\x00') 02:30:02 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xffffffff, 0x0) epoll_pwait(r0, &(0x7f0000004180)=[{}], 0x1, 0x0, &(0x7f0000004200)={[0xffff]}, 0x8) [ 2253.784828][ T3646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:30:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016e99000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) [ 2253.944905][T27517] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2253.966209][T32026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2253.975740][ T3646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:30:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'macsec0\x00'}) 02:30:02 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:30:02 executing program 4: fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 02:30:02 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f00000012c0)=[{&(0x7f0000001240)='n', 0x1, 0x1ed24743}], 0x0, 0x0) 02:30:02 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/zoneinfo\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY(r0, 0x0, 0x0) 02:30:02 executing program 1: syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0x20, 0x181000) 02:30:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016e9a000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:30:03 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) 02:30:03 executing program 4: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000010c0), 0x0, &(0x7f0000001100)={[{@fat=@discard='discard'}, {@fat=@nocase='nocase'}], [{@func={'func', 0x3d, 'FILE_CHECK'}}, {@seclabel='seclabel'}]}) 02:30:03 executing program 1: syz_mount_image$xfs(0x0, 0x0, 0x0, 0x2, &(0x7f0000001500)=[{&(0x7f00000002c0)="dc", 0x1}, {&(0x7f0000001380)="80", 0x1}], 0x0, 0x0) 02:30:03 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, 0x0) [ 2254.824192][T32026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:30:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016e9b000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:30:03 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000140)) 02:30:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5}]}, 0x28}}, 0x0) 02:30:03 executing program 4: r0 = socket(0xa, 0x2, 0x0) recvmsg$can_raw(r0, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x40012143) 02:30:03 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000000)) 02:30:03 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_BMAP(r0, &(0x7f0000002100)={0x18}, 0x49) 02:30:03 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:30:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016e9c000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) [ 2255.425122][T16053] nla_validate_range_unsigned: 12 callbacks suppressed [ 2255.425134][T16053] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:30:03 executing program 5: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x80200, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00') r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80)='/dev/full\x00', 0x101040, 0x0) ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f0000000fc0)={{0x0, 0x0, 0xc, 0xfd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4}, {0x5000, 0x0, 0x9, 0x3, 0x4, 0x55, 0x81, 0x2, 0x3, 0x40, 0x40, 0x4}, {0x1, 0x2, 0xc, 0xff, 0x1f, 0x80, 0x2, 0xb2, 0x20, 0x9, 0x6, 0x7}, {0x2004, 0x1000, 0x0, 0x0, 0x1f, 0x7f, 0x81, 0x7, 0x7, 0x40, 0x2, 0x7}, {0xe000, 0x6000, 0x0, 0x81, 0x9, 0x56, 0xd1, 0x80, 0xff, 0x4, 0xa8, 0x3}, {0x100000, 0x100000, 0xe, 0x0, 0x7, 0x3f, 0x2, 0x2, 0x3, 0x1f, 0x2}, {0x1000, 0x10000, 0x10, 0x0, 0x13, 0x0, 0x9, 0xf9, 0x6, 0x2, 0x7f, 0x1e}, {0x0, 0xd000, 0xc, 0x5, 0x1f, 0x24, 0x7, 0x33, 0xd9, 0x3f, 0x5, 0x1}, {0x4, 0x2}, {0x3000, 0x9}, 0x30, 0x0, 0x1000, 0x80, 0xa, 0x8801, 0x1000, [0x8b7e, 0x2, 0x57]}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001100)='/proc/self/net/pfkey\x00', 0x44003, 0x0) 02:30:03 executing program 4: pselect6(0x40, &(0x7f0000000080), &(0x7f0000000240)={0x2}, 0x0, 0x0, &(0x7f0000000340)={0x0}) 02:30:03 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/zoneinfo\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) 02:30:03 executing program 2: syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xffffffff, 0x0) [ 2255.520184][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 2255.520199][ T28] audit: type=1804 audit(1602037803.783:839): pid=16059 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3764/bus" dev="sda1" ino=16307 res=1 errno=0 02:30:03 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000000)={0x0, 0x0, 0x0, 'queue1\x00'}) [ 2255.617815][T16073] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2255.694096][ T28] audit: type=1804 audit(1602037803.953:840): pid=16074 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3764/bus" dev="sda1" ino=16307 res=1 errno=0 02:30:04 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast]}, 0x48) 02:30:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900c116fc9c000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:30:04 executing program 5: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x80200, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000000d40)='nl80211\x00') openat$full(0xffffffffffffff9c, &(0x7f0000000f80)='/dev/full\x00', 0x101040, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001100)='/proc/self/net/pfkey\x00', 0x44003, 0x0) socket(0x5, 0x0, 0x0) [ 2255.864895][ T3646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:30:04 executing program 1: r0 = socket(0xa, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) 02:30:04 executing program 2: r0 = socket(0x11, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x7800, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @empty}}}}) [ 2255.918305][ T28] audit: type=1804 audit(1602037804.173:841): pid=16074 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3764/bus" dev="sda1" ino=16307 res=1 errno=0 [ 2256.088271][T16103] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2256.209998][T16111] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:30:04 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:30:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016e9d000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:30:04 executing program 4: epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000004200)={[0xffff]}, 0x8) 02:30:04 executing program 2: bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0) 02:30:04 executing program 1: socketpair$unix(0x1, 0xf81f6209e5bb90f8, 0x0, 0x0) 02:30:04 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000200)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) 02:30:04 executing program 2: socketpair(0xa, 0x3, 0x9, 0x0) [ 2256.505375][T27517] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration 02:30:04 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x0, 0x0, &(0x7f00000002c0)) 02:30:04 executing program 4: add_key$user(&(0x7f0000000040)='user\x00', 0x0, 0x0, 0xffffff6c, 0x0) [ 2256.552673][T16138] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2256.561309][ T28] audit: type=1804 audit(1602037804.823:842): pid=16135 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3765/bus" dev="sda1" ino=16306 res=1 errno=0 [ 2256.705820][T16154] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2256.748894][ T28] audit: type=1804 audit(1602037805.013:843): pid=16141 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3765/bus" dev="sda1" ino=16306 res=1 errno=0 02:30:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000000029e000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:30:05 executing program 2: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000940)='batadv\x00') 02:30:05 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='statm\x00') ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, 0x0) [ 2256.903915][ T3646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2256.913023][ T28] audit: type=1804 audit(1602037805.133:844): pid=16141 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3765/bus" dev="sda1" ino=16306 res=1 errno=0 [ 2256.960973][T16169] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2257.001514][T16180] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2257.064098][T15233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:30:05 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:30:05 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xb, 0x42) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000040)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x128) 02:30:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016e9e000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:30:05 executing program 2: openat$nvram(0xffffffffffffff9c, &(0x7f0000000800)='/dev/nvram\x00', 0x402, 0x0) [ 2257.144899][T22839] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration 02:30:05 executing program 1: shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffb000/0x4000)=nil) [ 2257.283242][T16203] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2257.294613][ T28] audit: type=1804 audit(1602037805.563:845): pid=16202 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3766/bus" dev="sda1" ino=16373 res=1 errno=0 02:30:05 executing program 5: syz_open_dev$dri(&(0x7f000000fc40)='/dev/dri/card#\x00', 0x1, 0x0) 02:30:05 executing program 4: poll(&(0x7f0000000180), 0x3f, 0x80000002) 02:30:05 executing program 2: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmmsg$alg(r0, &(0x7f0000003240), 0x492492492492619, 0x101d0) 02:30:05 executing program 1: read$midi(0xffffffffffffffff, 0x0, 0x0) [ 2257.371244][T16212] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:30:05 executing program 5: pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x7, 0xffffffffffffffff) [ 2257.492258][ T28] audit: type=1804 audit(1602037805.754:846): pid=16218 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3766/bus" dev="sda1" ino=16373 res=1 errno=0 02:30:05 executing program 1: r0 = socket(0x2, 0xa, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={0x0}}, 0x0) [ 2257.652010][ T28] audit: type=1804 audit(1602037805.914:847): pid=16224 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3766/bus" dev="sda1" ino=16373 res=1 errno=0 02:30:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900ffffff9e000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:30:06 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:30:06 executing program 5: setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) syz_mount_image$xfs(&(0x7f0000000240)='xfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={[{@grpid='grpid'}, {@filestreams='filestreams'}], [{@hash='hash'}]}) 02:30:06 executing program 1: r0 = socket(0x11, 0x2, 0x0) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) 02:30:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016e9f000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) [ 2257.943715][T32026] net_ratelimit: 1 callbacks suppressed [ 2257.943725][T32026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2258.074628][ T28] audit: type=1804 audit(1602037806.344:848): pid=16283 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3767/bus" dev="sda1" ino=16304 res=1 errno=0 02:30:06 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect(r0, &(0x7f0000000000)=@l2tp={0x2, 0x0, @private}, 0x80) 02:30:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016ea0000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:30:06 executing program 4: mq_open(&(0x7f0000000280)='/dev/sg#\x00', 0x0, 0x0, 0x0) [ 2258.425105][ T148] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2258.983649][T32026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2260.023522][ T2630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2260.113504][T25033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:30:08 executing program 2: shmget$private(0x0, 0x3000, 0x61ae22125d7afbde, &(0x7f0000ffa000/0x3000)=nil) 02:30:08 executing program 1: syz_mount_image$xfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000001500), 0x0, &(0x7f0000001580)={[{@wsync='wsync'}, {@filestreams='filestreams'}], [{@fowner_gt={'fowner>'}}]}) syz_genetlink_get_family_id$gtp(&(0x7f00000016c0)='gtp\x00') 02:30:08 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x9, &(0x7f0000000000)="92ca415e88429d4e81"}) 02:30:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016ea1000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:30:08 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, 0x0, 0x48) 02:30:08 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) dup(r3) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) ioctl$FITRIM(r5, 0xc0185879, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) [ 2260.612749][T16330] nla_validate_range_unsigned: 6 callbacks suppressed [ 2260.612760][T16330] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2260.647289][ T28] kauditd_printk_skb: 2 callbacks suppressed 02:30:08 executing program 4: socket(0x2b, 0x1, 0x52e) [ 2260.647311][ T28] audit: type=1804 audit(1602037808.914:851): pid=16332 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3768/bus" dev="sda1" ino=16019 res=1 errno=0 02:30:09 executing program 5: socket$packet(0x11, 0xecae1df1f55a9971, 0x300) 02:30:09 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000005700)='/dev/vcs#\x00', 0x0, 0x0) read$char_raw(r0, &(0x7f0000000200)=ANY=[], 0x7c00) 02:30:09 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) getsockname$ax25(r0, 0x0, &(0x7f0000000240)) [ 2260.745345][T16347] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:30:09 executing program 4: membarrier(0x0, 0x0) [ 2260.863372][ T28] audit: type=1804 audit(1602037809.124:852): pid=16348 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3768/bus" dev="sda1" ino=16019 res=1 errno=0 [ 2261.022238][ T28] audit: type=1804 audit(1602037809.204:853): pid=16348 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3768/bus" dev="sda1" ino=16019 res=1 errno=0 02:30:09 executing program 2: semctl$SETVAL(0x0, 0x0, 0x10, &(0x7f0000001900)) 02:30:09 executing program 5: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='rxrpc\x00', 0x0, &(0x7f0000000100)="b0", 0x1, r0) [ 2261.063465][ T3646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:30:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016ea2000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:30:09 executing program 1: r0 = socket(0x11, 0x2, 0x0) recvfrom$netrom(r0, 0x0, 0x0, 0x101, 0x0, 0x0) 02:30:09 executing program 4: perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 02:30:09 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x0, 0x141082) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'U+'}, 0x16, 0x0) 02:30:09 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) dup(r3) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) ioctl$FITRIM(r5, 0xc0185879, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:30:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) [ 2261.217546][T16377] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2261.288389][T16385] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:30:09 executing program 1: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) 02:30:09 executing program 4: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) [ 2261.361696][ T28] audit: type=1804 audit(1602037809.624:854): pid=16396 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3769/bus" dev="sda1" ino=16082 res=1 errno=0 02:30:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r0, &(0x7f00000005c0)={&(0x7f0000000480), 0xc, &(0x7f0000000880)={&(0x7f0000000500)={0xfffffffffffffdfb}, 0x14}}, 0x0) 02:30:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016ea3000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:30:09 executing program 5: add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)='\x00', 0x1, 0xfffffffffffffffc) [ 2261.562434][ T28] audit: type=1804 audit(1602037809.824:855): pid=16409 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3769/bus" dev="sda1" ino=16082 res=1 errno=0 02:30:09 executing program 1: syz_mount_image$xfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000001500)=[{&(0x7f00000002c0)="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", 0xffc, 0x5}], 0x0, 0x0) [ 2261.624442][T27517] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration 02:30:10 executing program 2: openat$full(0xffffffffffffff9c, &(0x7f0000000f80)='/dev/full\x00', 0x101040, 0x0) [ 2261.702573][ T28] audit: type=1804 audit(1602037809.894:856): pid=16409 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3769/bus" dev="sda1" ino=16082 res=1 errno=0 [ 2261.736417][T16419] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:30:10 executing program 4: io_setup(0x0, &(0x7f0000000000)) io_setup(0xffff, &(0x7f0000000040)) io_setup(0x0, &(0x7f0000000000)=0x0) io_destroy(r0) io_setup(0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) io_setup(0x0, &(0x7f0000000000)) 02:30:10 executing program 5: io_setup(0x5000000, &(0x7f0000000000)) 02:30:10 executing program 2: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000001440)=[{&(0x7f0000001380)='O', 0x1, 0x100000000}], 0x0, 0x0) [ 2261.873950][T16433] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:30:10 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) dup(r3) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) ioctl$FITRIM(r5, 0xc0185879, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:30:10 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) 02:30:10 executing program 1: ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(0xffffffffffffffff, 0x942e, 0x0) socket(0x0, 0x0, 0x0) [ 2262.001137][ T28] audit: type=1804 audit(1602037810.264:857): pid=16447 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3770/bus" dev="sda1" ino=16022 res=1 errno=0 02:30:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016ea4000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:30:10 executing program 4: r0 = socket(0x11, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000340)={'gre0\x00', &(0x7f0000000240)=ANY=[]}) [ 2262.108399][ T3646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2262.154503][ T28] audit: type=1804 audit(1602037810.414:858): pid=16456 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3770/bus" dev="sda1" ino=16022 res=1 errno=0 02:30:10 executing program 2: [ 2262.265451][ T148] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2262.276189][ T148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:30:10 executing program 5: [ 2262.337024][T16465] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:30:10 executing program 1: [ 2262.368193][ T28] audit: type=1804 audit(1602037810.504:859): pid=16456 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3770/bus" dev="sda1" ino=16022 res=1 errno=0 02:30:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r0, 0x0, 0x0) 02:30:10 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) [ 2262.457138][T16478] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:30:10 executing program 5: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000080)=""/53) 02:30:10 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) ioctl$FITRIM(r5, 0xc0185879, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:30:10 executing program 1: 02:30:10 executing program 4: 02:30:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016ea5000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:30:10 executing program 1: [ 2262.677229][ T28] audit: type=1804 audit(1602037810.944:860): pid=16497 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3771/bus" dev="sda1" ino=16026 res=1 errno=0 [ 2262.699252][T16501] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:30:11 executing program 5: [ 2262.851378][T16516] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:30:11 executing program 4: 02:30:11 executing program 1: [ 2262.916050][ T148] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2262.926783][ T148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:30:11 executing program 5: 02:30:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016ea6000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) [ 2263.144896][ T3646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2263.153051][ T3646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:30:11 executing program 2: 02:30:11 executing program 4: 02:30:11 executing program 1: 02:30:11 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) ioctl$FITRIM(r5, 0xc0185879, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:30:11 executing program 5: 02:30:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016ea7000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:30:11 executing program 5: 02:30:11 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) 02:30:11 executing program 4: [ 2263.547948][ T148] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration 02:30:12 executing program 2: 02:30:12 executing program 5: 02:30:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016ea8000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:30:12 executing program 4: 02:30:12 executing program 1: 02:30:12 executing program 5: 02:30:12 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) ioctl$FITRIM(r5, 0xc0185879, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:30:12 executing program 2: 02:30:12 executing program 1: 02:30:12 executing program 4: 02:30:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016ea9000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:30:12 executing program 5: 02:30:12 executing program 2: 02:30:12 executing program 1: [ 2264.183292][ T3646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:30:12 executing program 1: 02:30:12 executing program 2: 02:30:12 executing program 4: 02:30:12 executing program 5: 02:30:13 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:30:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016eaa000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:30:13 executing program 1: 02:30:13 executing program 2: 02:30:13 executing program 4: 02:30:13 executing program 5: 02:30:13 executing program 4: 02:30:13 executing program 5: 02:30:13 executing program 1: 02:30:13 executing program 2: 02:30:13 executing program 4: 02:30:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016eab000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) [ 2265.224300][T32026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:30:14 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:30:14 executing program 5: 02:30:14 executing program 1: 02:30:14 executing program 2: 02:30:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016eac000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:30:14 executing program 4: 02:30:14 executing program 1: [ 2265.810863][T16725] nla_validate_range_unsigned: 12 callbacks suppressed [ 2265.810875][T16725] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:30:14 executing program 2: 02:30:14 executing program 4: 02:30:14 executing program 5: [ 2265.876854][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 2265.876872][ T28] audit: type=1804 audit(1602037814.144:872): pid=16727 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3775/bus" dev="sda1" ino=16312 res=1 errno=0 [ 2265.980066][T16739] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:30:14 executing program 1: [ 2266.124428][ T28] audit: type=1804 audit(1602037814.354:873): pid=16740 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3775/bus" dev="sda1" ino=16312 res=1 errno=0 [ 2266.185637][T25033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:30:14 executing program 4: [ 2266.227894][ T28] audit: type=1804 audit(1602037814.464:874): pid=16740 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3775/bus" dev="sda1" ino=16312 res=1 errno=0 [ 2266.262897][T32026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:30:15 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:30:15 executing program 2: 02:30:15 executing program 5: 02:30:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016ead000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) [ 2266.746634][ T148] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration 02:30:15 executing program 1: 02:30:15 executing program 4: [ 2266.854268][T16762] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:30:15 executing program 4: 02:30:15 executing program 5: 02:30:15 executing program 1: 02:30:15 executing program 2: [ 2266.960248][T16775] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2266.972272][ T28] audit: type=1804 audit(1602037815.244:875): pid=16769 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3776/bus" dev="sda1" ino=16325 res=1 errno=0 02:30:15 executing program 2: 02:30:15 executing program 4: [ 2267.204477][ T28] audit: type=1804 audit(1602037815.474:876): pid=16784 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3776/bus" dev="sda1" ino=16325 res=1 errno=0 [ 2267.303533][ T3646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2267.321815][ T28] audit: type=1804 audit(1602037815.544:877): pid=16784 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3776/bus" dev="sda1" ino=16325 res=1 errno=0 [ 2267.384026][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:30:16 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:30:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016eae000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:30:16 executing program 1: 02:30:16 executing program 5: 02:30:16 executing program 4: 02:30:16 executing program 2: 02:30:16 executing program 4: [ 2267.853503][T16799] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:30:16 executing program 1: 02:30:16 executing program 2: 02:30:16 executing program 5: [ 2267.928761][T16806] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2268.010924][ T28] audit: type=1804 audit(1602037816.274:878): pid=16812 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3777/bus" dev="sda1" ino=16315 res=1 errno=0 [ 2268.055664][ T148] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2268.066417][ T148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:30:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016eaf000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:30:16 executing program 5: [ 2268.265433][ T28] audit: type=1804 audit(1602037816.535:879): pid=16827 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3777/bus" dev="sda1" ino=16315 res=1 errno=0 [ 2268.274233][T16830] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2268.346058][ T3646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2268.367112][T27517] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2268.378790][ T8284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2268.388559][ T3646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2268.408614][T16837] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:30:17 executing program 4: 02:30:17 executing program 1: 02:30:17 executing program 2: 02:30:17 executing program 5: 02:30:17 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:30:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016eb0000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:30:17 executing program 2: [ 2268.917565][T16858] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:30:17 executing program 1: 02:30:17 executing program 4: 02:30:17 executing program 5: [ 2269.005122][T16865] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2269.033078][ T28] audit: type=1804 audit(1602037817.295:880): pid=16871 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3778/bus" dev="sda1" ino=16312 res=1 errno=0 02:30:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016eb1000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:30:17 executing program 2: 02:30:17 executing program 4: [ 2269.232906][T15233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2269.261794][ T28] audit: type=1804 audit(1602037817.525:881): pid=16886 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3778/bus" dev="sda1" ino=16312 res=1 errno=0 02:30:17 executing program 4: [ 2269.304042][ T148] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration 02:30:17 executing program 5: 02:30:17 executing program 1: [ 2269.467832][ T3646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:30:18 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) 02:30:18 executing program 2: 02:30:18 executing program 4: 02:30:18 executing program 1: 02:30:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016eb2000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:30:18 executing program 5: 02:30:18 executing program 2: 02:30:18 executing program 5: 02:30:18 executing program 1: 02:30:18 executing program 4: 02:30:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016eb3000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:30:18 executing program 2: [ 2270.502617][ T3646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:30:19 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x0) 02:30:19 executing program 4: 02:30:19 executing program 1: 02:30:19 executing program 5: 02:30:19 executing program 2: 02:30:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000016eb4000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) [ 2270.879828][T16988] nla_validate_range_unsigned: 6 callbacks suppressed [ 2270.879839][T16988] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:30:19 executing program 2: 02:30:19 executing program 1: 02:30:19 executing program 4: 02:30:19 executing program 5: [ 2270.977020][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 2270.977037][ T28] audit: type=1804 audit(1602037819.245:884): pid=16990 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3780/bus" dev="sda1" ino=15803 res=1 errno=0 [ 2271.027277][T16999] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:30:19 executing program 1: 02:30:19 executing program 4: [ 2271.207126][ T28] audit: type=1804 audit(1602037819.415:885): pid=17000 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3780/bus" dev="sda1" ino=15803 res=1 errno=0 [ 2271.350252][ T28] audit: type=1804 audit(1602037819.565:886): pid=17000 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3780/bus" dev="sda1" ino=15803 res=1 errno=0 02:30:19 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x0) 02:30:19 executing program 1: 02:30:19 executing program 5: 02:30:19 executing program 2: 02:30:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09009cfc16c1000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:30:19 executing program 4: 02:30:19 executing program 5: [ 2271.508433][T17028] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2271.542888][ T3646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:30:19 executing program 2: 02:30:19 executing program 4: [ 2271.570504][ T28] audit: type=1804 audit(1602037819.835:887): pid=17030 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3781/bus" dev="sda1" ino=16308 res=1 errno=0 02:30:19 executing program 1: [ 2271.619446][T17042] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:30:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900ffffffc3000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) [ 2271.757022][ T28] audit: type=1804 audit(1602037820.025:888): pid=17045 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3781/bus" dev="sda1" ino=16308 res=1 errno=0 02:30:20 executing program 4: [ 2271.969747][ T28] audit: type=1804 audit(1602037820.205:889): pid=17045 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3781/bus" dev="sda1" ino=16308 res=1 errno=0 [ 2272.003956][T17061] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:30:20 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1f) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x0) 02:30:20 executing program 5: 02:30:20 executing program 2: 02:30:20 executing program 1: 02:30:20 executing program 4: [ 2272.113673][T17061] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:30:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900ffffffe4000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:30:20 executing program 1: 02:30:20 executing program 2: 02:30:20 executing program 5: 02:30:20 executing program 4: [ 2272.263312][T15233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2272.333606][ T28] audit: type=1804 audit(1602037820.605:890): pid=17088 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3782/bus" dev="sda1" ino=16304 res=1 errno=0 02:30:20 executing program 5: [ 2272.400445][T17094] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:30:20 executing program 2: [ 2272.521219][ T28] audit: type=1804 audit(1602037820.785:891): pid=17095 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3782/bus" dev="sda1" ino=16304 res=1 errno=0 [ 2272.584188][ T3312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2272.691645][T17110] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2272.721387][ T28] audit: type=1804 audit(1602037820.955:892): pid=17095 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir913608997/syzkaller.tlXhbS/3782/bus" dev="sda1" ino=16304 res=1 errno=0 02:30:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900000002e8000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:30:21 executing program 4: 02:30:21 executing program 1: 02:30:21 executing program 2: 02:30:21 executing program 5: 02:30:21 executing program 0: 02:30:21 executing program 1: 02:30:21 executing program 5: 02:30:21 executing program 2: [ 2272.978268][T17127] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:30:21 executing program 4: 02:30:21 executing program 0: [ 2273.066132][T17138] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:30:21 executing program 5: 02:30:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900fffffff0000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:30:21 executing program 1: 02:30:21 executing program 4: 02:30:21 executing program 2: 02:30:21 executing program 0: 02:30:21 executing program 5: 02:30:21 executing program 0: 02:30:21 executing program 1: 02:30:21 executing program 4: 02:30:21 executing program 2: 02:30:21 executing program 5: 02:30:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000000cf6000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:30:21 executing program 1: 02:30:21 executing program 2: 02:30:21 executing program 5: 02:30:21 executing program 0: 02:30:21 executing program 4: 02:30:21 executing program 1: [ 2273.622250][T32026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:30:22 executing program 2: 02:30:22 executing program 5: 02:30:22 executing program 0: 02:30:22 executing program 4: 02:30:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900fffffffc000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) [ 2273.782777][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2273.793530][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:30:22 executing program 1: 02:30:22 executing program 2: 02:30:22 executing program 5: 02:30:22 executing program 0: 02:30:22 executing program 4: 02:30:22 executing program 2: 02:30:22 executing program 1: 02:30:22 executing program 5: 02:30:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900000000fe000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:30:22 executing program 1: 02:30:22 executing program 0: 02:30:22 executing program 4: 02:30:22 executing program 2: 02:30:22 executing program 1: 02:30:22 executing program 5: 02:30:22 executing program 0: 02:30:22 executing program 4: 02:30:22 executing program 2: 02:30:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900fffffffe000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:30:22 executing program 1: 02:30:22 executing program 5: 02:30:22 executing program 4: 02:30:22 executing program 2: 02:30:22 executing program 0: 02:30:22 executing program 1: 02:30:22 executing program 5: 02:30:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09000003ffff000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) [ 2274.662355][T32026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:30:23 executing program 0: 02:30:23 executing program 4: 02:30:23 executing program 1: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003280)={0x77359400}) 02:30:23 executing program 2: 02:30:23 executing program 5: 02:30:23 executing program 4: 02:30:23 executing program 0: 02:30:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000e0ffff000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:30:23 executing program 1: 02:30:23 executing program 2: 02:30:23 executing program 5: 02:30:23 executing program 4: 02:30:23 executing program 0: [ 2275.074830][T27517] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration 02:30:23 executing program 1: 02:30:23 executing program 5: 02:30:23 executing program 4: 02:30:23 executing program 2: 02:30:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000f0ffff000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:30:23 executing program 0: 02:30:23 executing program 1: [ 2275.302185][T15233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:30:23 executing program 5: 02:30:23 executing program 4: 02:30:23 executing program 2: 02:30:23 executing program 0: 02:30:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09007fffffff000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:30:23 executing program 1: 02:30:23 executing program 5: 02:30:23 executing program 2: 02:30:23 executing program 4: 02:30:23 executing program 0: 02:30:23 executing program 1: 02:30:24 executing program 5: [ 2275.703661][ T3312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:30:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09009effffff000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:30:24 executing program 0: 02:30:24 executing program 4: 02:30:24 executing program 2: 02:30:24 executing program 1: 02:30:24 executing program 5: 02:30:24 executing program 4: 02:30:24 executing program 0: 02:30:24 executing program 2: [ 2275.937803][T17447] nla_validate_range_unsigned: 18 callbacks suppressed [ 2275.937815][T17447] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:30:24 executing program 5: 02:30:24 executing program 1: 02:30:24 executing program 0: [ 2276.105820][T17464] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:30:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900c3ffffff000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:30:24 executing program 4: 02:30:24 executing program 2: 02:30:24 executing program 5: 02:30:24 executing program 1: r0 = socket$inet(0xa, 0x801, 0x84) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) listen(r0, 0x4) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3}, 0xe) recvmmsg(r1, &(0x7f0000004100), 0x316, 0x0, &(0x7f0000004a80)={0x77359400}) 02:30:24 executing program 0: move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x5) 02:30:24 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x30}, {0x6}]}, 0x10) 02:30:24 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001a80)="b9ff036e600d698cb89e14f088a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x40) 02:30:24 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x1401, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) [ 2276.343386][ T196] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2276.364397][T17483] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:30:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="3400000010000104000009040000000000000000", @ANYRES32=r2, @ANYBLOB="0100000000000000140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_FLAGS={0x8, 0x9, 0x3778bcbaae6b531f}, @IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x34}}, 0x0) 02:30:24 executing program 4: open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) [ 2276.473498][T17498] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:30:24 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, 0x0, 0x0, 0x20000801, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) 02:30:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900e4ffffff000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:30:24 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x4000000000006b9, 0x0, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1100000042000506000000366ab1001000ed623c087dcbffa241ee19776b1d9ada6676c7517f97b2d3add33b04"], 0x14}}, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0xc040) mount(0x0, 0x0, 0x0, 0x0, 0x0) inotify_init() pipe(0x0) flock(0xffffffffffffffff, 0x2) [ 2276.631212][T17518] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2276.711114][T17525] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2276.731241][T17527] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2276.753034][ T3312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:30:25 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) recvmmsg(r0, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2140, 0x0) [ 2276.776301][T17535] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:30:25 executing program 0: socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000380)=ANY=[@ANYBLOB='<\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000001500000014000380080001000000000008"], 0x3c}}, 0x0) socket(0x2, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) 02:30:25 executing program 2: syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000001c0)) newfstatat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x0) 02:30:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900f0ffffff000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:30:25 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = inotify_init() r2 = open(&(0x7f00000005c0)='./file0\x00', 0x220c2, 0x0) inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x4000082) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000640)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) socket$inet_udplite(0x2, 0x2, 0x88) sendfile(r2, r2, &(0x7f0000000080), 0xa198) 02:30:25 executing program 5: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f0000000100)='comm\x00') r1 = open(&(0x7f0000000400)='./bus\x00', 0x1145042, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000003c0)) fcntl$notify(r2, 0x402, 0xb1c661d398500c73) fcntl$setownex(r2, 0xf, &(0x7f0000000240)) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x208202) sendfile(r0, r1, 0x0, 0x8000fffffffa) 02:30:25 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002d40)={0x18, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000}, [@jmp={0x4, 0x0, 0x2}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 2277.138053][T17570] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2277.149587][ T28] audit: type=1800 audit(1602037825.425:893): pid=17571 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=16323 res=0 errno=0 02:30:25 executing program 0: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2277.201839][T17583] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2277.211277][ T28] audit: type=1800 audit(1602037825.475:894): pid=17571 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=16323 res=0 errno=0 02:30:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900fcffffff000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) [ 2277.432882][T17600] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2277.493291][T17606] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 02:30:25 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r1) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) 02:30:25 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@local, @ipv4={[0x0, 0x0, 0x8], [], @empty}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000001900070000000000000000000a"], 0x1c}}, 0x0) 02:30:25 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000000)={@my=0x0}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x0}, 0x10) shutdown(r1, 0x0) 02:30:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 02:30:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900feffffff000000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:30:26 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) listen(r0, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 02:30:26 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0x40405514, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0}) [ 2277.789098][ T2630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:30:26 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = inotify_init() r2 = open(&(0x7f00000005c0)='./file0\x00', 0x220c2, 0x0) inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x4000082) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000640)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) socket$inet_udplite(0x2, 0x2, 0x88) sendfile(r2, r2, &(0x7f0000000080), 0xa198) 02:30:26 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flow={{0x9, 0x1, 'flow\x00'}, {0x2c, 0x2, [@TCA_FLOW_EMATCHES={0x28, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1}]}]}]}}]}, 0x5c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 02:30:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000000000000100000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:30:26 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48) exit(0x0) 02:30:26 executing program 4: 02:30:26 executing program 1: r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) r1 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg(r1, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) [ 2278.045204][T17674] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 02:30:26 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000001000010095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='sys_enter\x00', r0}, 0x10) timer_create(0x0, 0x0, &(0x7f00009b1ffc)) 02:30:26 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r1, 0x0) accept(r1, 0x0, 0x0) [ 2278.134722][T17681] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 02:30:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x18, r1, 0x1, 0x0, 0x0, {0xa}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x0) 02:30:26 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = dup3(r0, r1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0x4004ae8b, &(0x7f0000000000)) dup2(r5, r4) 02:30:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000000000000400000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:30:26 executing program 0: setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000)="2b595a1085f2263c9d765922edef91f53ae7411e34d7c3927865e05a182df329c6daf158e5aaeb5108d9325d2dd50032cf0a1cf89a3f8c3e23f71ad7817086f4d9689af21ee53ee82ce4c557", 0x4c) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x890c, &(0x7f0000000000)={'sit0\x00', 0x0}) [ 2278.347291][T15233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2278.407284][T17720] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241646265 (4241646265 ns) > initial count (296265111 ns). Using initial count to start timer. 02:30:27 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = inotify_init() r2 = open(&(0x7f00000005c0)='./file0\x00', 0x220c2, 0x0) inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x4000082) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000640)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) socket$inet_udplite(0x2, 0x2, 0x88) sendfile(r2, r2, &(0x7f0000000080), 0xa198) 02:30:27 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x4b52, &(0x7f0000000100)) 02:30:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000000000000800000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) [ 2278.831359][ T2630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:30:27 executing program 5: chdir(0x0) r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x208200) open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) truncate(&(0x7f0000000040)='./bus\x00', 0x208002) 02:30:27 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r3 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000001780)=0x2) 02:30:27 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) capget(&(0x7f0000000100), 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r1, &(0x7f0000004d80)=[{{0x0, 0x2000000, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9120cab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fb38", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0), 0x80fe}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6e0968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9ae0278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x400000000000132, 0x4000000) 02:30:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000000000001000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) [ 2279.004593][T17785] ion_buffer_destroy: buffer still mapped in the kernel [ 2279.046092][ T28] audit: type=1804 audit(1602037827.316:895): pid=17791 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir072534603/syzkaller.mONvNZ/4170/bus" dev="sda1" ino=16300 res=1 errno=0 02:30:27 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4030ae7b, &(0x7f0000000280)) 02:30:27 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40003, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001bb411e61017523e10000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000140)) 02:30:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900ffffffff88a000000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:30:27 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) connect$inet(r0, &(0x7f0000593000)={0x2, 0x0, @multicast2}, 0x10) sendmmsg$inet(r1, &(0x7f0000005240)=[{{0x0, 0xffffff7f, 0x0}}], 0x102, 0x401eb94) [ 2279.283433][ T28] audit: type=1800 audit(1602037827.556:896): pid=17791 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16300 res=0 errno=0 [ 2279.384051][ T28] audit: type=1804 audit(1602037827.556:897): pid=17791 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir072534603/syzkaller.mONvNZ/4170/bus" dev="sda1" ino=16300 res=1 errno=0 02:30:27 executing program 5: clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setuid(0xee01) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000040)=[{&(0x7f0000000640)="8a", 0xb500}], 0x1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 2279.542499][T22839] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2279.553249][T22839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2279.628094][ T28] audit: type=1800 audit(1602037827.596:898): pid=17799 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16300 res=0 errno=0 [ 2279.718608][T17790] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 2279.862821][ T3312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:30:28 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = inotify_init() r2 = open(&(0x7f00000005c0)='./file0\x00', 0x220c2, 0x0) inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x4000082) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000640)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) socket$inet_udplite(0x2, 0x2, 0x88) sendfile(r2, r2, &(0x7f0000000080), 0xa198) 02:30:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000000000000002000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:30:28 executing program 1: r0 = socket(0x11, 0xa, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, 0x0) 02:30:28 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) connect$inet(r0, &(0x7f0000593000)={0x2, 0x0, @multicast2}, 0x10) sendmmsg$inet(r1, &(0x7f0000005240)=[{{0x0, 0xffffff7f, 0x0}}], 0x102, 0x401eb94) 02:30:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)={0x88, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}, @NL80211_ATTR_FRAME={0x68, 0x33, @beacon={@wo_ht={{}, {}, @broadcast, @broadcast, @from_mac=@device_b}, 0x0, @random, 0x0, @void, @val, @void, @val={0x4, 0x6}, @void, @void, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @void, @val={0x71, 0x7}, @val={0x76, 0x6}}}]}, 0x88}}, 0x0) 02:30:28 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readahead(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x40001, 0x2}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380)='nl80211\x00') sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffffff, 0xc0406619, &(0x7f00000000c0)={{0x2, 0x0, @identifier="20e94ec976fd2dfbfa9bdc6c33f1ea3b"}}) 02:30:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000000000000003000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:30:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)={0x9c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x4fe}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_FRAME={0x68, 0x33, @beacon={@wo_ht={{}, {}, @broadcast, @broadcast, @from_mac=@device_b}, 0x0, @random, 0x0, @void, @val, @void, @val={0x4, 0x6}, @void, @void, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @void, @val={0x71, 0x7}, @val={0x76, 0x6}}}]}, 0x9c}}, 0x0) 02:30:28 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x7, 0x5, 0x2}) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc4c74c7"}, 0x0, 0x2, @offset=0x400040, 0x10feff}) 02:30:28 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x4a8, 0x0, 0x6, 0x0, 0x2c0, 0x2c0, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8, 'recent\x00'}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8, 'recent\x00'}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x508) 02:30:29 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}]}}}]}, 0x40}}, 0x0) 02:30:29 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000080)="bd", 0x1) tee(r1, r0, 0x3, 0x0) [ 2280.767933][T17908] xt_TCPMSS: Only works on TCP SYN packets [ 2280.779399][T17911] ------------[ cut here ]------------ [ 2280.825596][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2280.846495][T17926] xt_TCPMSS: Only works on TCP SYN packets [ 2280.848294][T17911] WARNING: CPU: 1 PID: 17911 at mm/gup.c:2992 pin_user_pages_locked+0x60d/0x780 [ 2280.902448][ T2630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2280.939610][T17911] Modules linked in: [ 2280.964406][T17911] CPU: 1 PID: 17911 Comm: syz-executor.0 Not tainted 5.9.0-rc8-next-20201006-syzkaller #0 [ 2281.017915][T17911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2281.058377][T17911] RIP: 0010:pin_user_pages_locked+0x60d/0x780 [ 2281.087448][T17911] Code: cf ff 49 83 c7 08 e8 22 2e cf ff 48 8b 44 24 10 c6 44 24 10 01 48 05 00 10 00 00 48 89 44 24 08 e9 65 fb ff ff e8 03 2e cf ff <0f> 0b 49 c7 c4 ea ff ff ff e9 8a fe ff ff e8 f0 2d cf ff 0f 0b 49 [ 2281.168123][T17911] RSP: 0018:ffffc900039cf648 EFLAGS: 00010212 [ 2281.196051][T17911] RAX: 000000000000cc0f RBX: 0000000000010000 RCX: ffffc90002169000 [ 2281.234899][T17911] RDX: 0000000000040000 RSI: ffffffff81a6192d RDI: 0000000000000005 [ 2281.271395][T17911] RBP: ffffc900039cf728 R08: ffffc900039cf728 R09: ffff8880345c08c7 [ 2281.305830][T17911] R10: 0000000000000000 R11: 1ffffffff1a8efc3 R12: 0000000000000000 [ 2281.326191][T17911] R13: 0000000000000110 R14: 0000000000000110 R15: ffff88804672a010 [ 2281.338244][T17911] FS: 00007f3e4c47a700(0000) GS:ffff8880ae500000(0000) knlGS:0000000000000000 [ 2281.348032][T17911] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2281.355973][T17911] CR2: 0000001b3342e000 CR3: 00000000a8694000 CR4: 00000000001526e0 [ 2281.365522][T17911] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2281.374027][T17911] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2281.382924][T15233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2281.383690][T17911] Call Trace: [ 2281.409343][T17911] get_vaddr_frames+0x788/0x960 [ 2281.422462][T17911] ? mark_held_locks+0x9f/0xe0 [ 2281.436260][T17911] ? kasan_unpoison_shadow+0x33/0x40 [ 2281.449903][T17911] ? frame_vector_destroy+0x70/0x70 [ 2281.469071][T17911] ? kvmalloc_node+0x69/0xf0 [ 2281.486707][T17911] vb2_create_framevec+0x55/0xc0 [ 2281.506015][T17911] vb2_vmalloc_get_userptr+0xce/0x4c0 [ 2281.524605][T17911] ? vb2_vmalloc_dmabuf_ops_attach+0x430/0x430 [ 2281.530806][T17911] __prepare_userptr+0x342/0x15f0 [ 2281.551322][T17911] ? vb2_queue_error+0x60/0x60 [ 2281.556327][T17911] ? tomoyo_path_number_perm+0x441/0x590 02:30:29 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = inotify_init() r2 = open(&(0x7f00000005c0)='./file0\x00', 0x220c2, 0x0) inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x4000082) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000640)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}}, 0x90) sendfile(r2, r2, &(0x7f0000000080), 0xa198) 02:30:29 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x4a8, 0x0, 0x6, 0x0, 0x2c0, 0x2c0, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8, 'recent\x00'}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8, 'recent\x00'}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x508) 02:30:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000000000000004000700000008000300", @ANYRES32=r3, @ANYBLOB="08000500020000001400060076657468315f746f5f7465616d0000000400cc00080005000b0000001400040073"], 0x58}}, 0x0) 02:30:29 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}]}}}]}, 0x40}}, 0x0) [ 2281.571284][T17911] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 2281.577295][T17911] ? stack_trace_consume_entry+0x160/0x160 [ 2281.593510][T17911] ? lock_acquire+0x1f2/0xaa0 [ 2281.598278][T17911] ? __video_do_ioctl+0x550/0xe20 [ 2281.623014][T17911] ? lock_release+0x890/0x890 [ 2281.627911][T17911] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2281.651366][T17911] ? tomoyo_profile+0x42/0x50 [ 2281.657000][T17911] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 2281.679205][T17911] __buf_prepare+0x635/0x7d0 [ 2281.704691][T17911] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 2281.710821][T17943] nla_validate_range_unsigned: 16 callbacks suppressed [ 2281.710831][T17943] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2281.722070][T17944] xt_TCPMSS: Only works on TCP SYN packets [ 2281.736600][T17911] ? vb2_queue_or_prepare_buf+0x68d/0x2640 [ 2281.736623][T17911] vb2_core_qbuf+0xa9d/0x11c0 [ 2281.736651][T17911] vb2_qbuf+0x135/0x1a0 [ 2281.736672][T17911] ? vb2_ioctl_prepare_buf+0x140/0x140 [ 2281.736702][T17911] vb2_ioctl_qbuf+0xfb/0x140 [ 2281.736724][T17911] v4l_qbuf+0x92/0xc0 [ 2281.736746][T17911] __video_do_ioctl+0xb94/0xe20 [ 2281.736774][T17911] ? v4l_print_control+0x60/0x60 [ 2281.736807][T17911] video_usercopy+0x207/0xe50 [ 2281.736828][T17911] ? v4l_print_control+0x60/0x60 [ 2281.736847][T17911] ? v4l_enumstd+0x60/0x60 [ 2281.736932][T17911] ? __generic_block_fiemap+0x670/0x6a0 [ 2281.736967][T17911] ? __fget_files+0x294/0x400 [ 2281.737025][T17911] v4l2_ioctl+0x1b3/0x250 02:30:30 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x480, 0x0, 0x0, 0x0, 0x0, 0x4}) 02:30:30 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x4a8, 0x0, 0x6, 0x0, 0x2c0, 0x2c0, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8, 'recent\x00'}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8, 'recent\x00'}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x508) [ 2281.737046][T17911] ? v4l2_prio_init+0x20/0x20 [ 2281.737066][T17911] __x64_sys_ioctl+0x193/0x200 [ 2281.737089][T17911] do_syscall_64+0x2d/0x70 [ 2281.737109][T17911] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2281.737124][T17911] RIP: 0033:0x45de29 [ 2281.737149][T17911] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 02:30:30 executing program 4: r0 = fsopen(&(0x7f0000000100)='cgroup\x00', 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f00000001c0)='cpu\x00et\a', &(0x7f0000000200)='./file0\x00', r1) [ 2281.877347][T17955] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 2281.935972][T17966] xt_TCPMSS: Only works on TCP SYN packets [ 2281.945231][T32026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 02:30:30 executing program 1: mbind(&(0x7f00009e5000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000000)=0x1, 0x4, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) sched_getparam(0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x4, 0x0, 0x0, 0x0) [ 2282.103110][ T196] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2282.108907][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2282.114062][ T196] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2282.203601][T17911] RSP: 002b:00007f3e4c479c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2282.221226][T17911] RAX: ffffffffffffffda RBX: 000000000001c640 RCX: 000000000045de29 [ 2282.229246][T17911] RDX: 0000000020000140 RSI: 00000000c058560f RDI: 0000000000000003 [ 2282.292747][T17911] RBP: 000000000118bf60 R08: 0000000000000000 R09: 0000000000000000 [ 2282.300767][T17911] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118bf2c [ 2282.323150][T17911] R13: 00007ffd80c542ef R14: 00007f3e4c47a9c0 R15: 000000000118bf2c [ 2282.343447][T17911] Kernel panic - not syncing: panic_on_warn set ... [ 2282.350074][T17911] CPU: 1 PID: 17911 Comm: syz-executor.0 Not tainted 5.9.0-rc8-next-20201006-syzkaller #0 [ 2282.359968][T17911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2282.370030][T17911] Call Trace: [ 2282.373353][T17911] dump_stack+0x198/0x1fb [ 2282.377787][T17911] panic+0x382/0x7fb [ 2282.381707][T17911] ? __warn_printk+0xf3/0xf3 [ 2282.386323][T17911] ? __warn.cold+0x1d/0xbb [ 2282.390861][T17911] ? pin_user_pages_locked+0x60d/0x780 [ 2282.396335][T17911] __warn.cold+0x38/0xbb [ 2282.400595][T17911] ? pin_user_pages_locked+0x60d/0x780 [ 2282.406138][T17911] report_bug+0x1bd/0x210 [ 2282.410548][T17911] handle_bug+0x38/0x90 [ 2282.414724][T17911] ? v4l_qbuf+0x92/0xc0 [ 2282.418891][T17911] exc_invalid_op+0x14/0x40 [ 2282.423412][T17911] asm_exc_invalid_op+0x12/0x20 [ 2282.428282][T17911] RIP: 0010:pin_user_pages_locked+0x60d/0x780 [ 2282.434362][T17911] Code: cf ff 49 83 c7 08 e8 22 2e cf ff 48 8b 44 24 10 c6 44 24 10 01 48 05 00 10 00 00 48 89 44 24 08 e9 65 fb ff ff e8 03 2e cf ff <0f> 0b 49 c7 c4 ea ff ff ff e9 8a fe ff ff e8 f0 2d cf ff 0f 0b 49 [ 2282.454110][T17911] RSP: 0018:ffffc900039cf648 EFLAGS: 00010212 [ 2282.460186][T17911] RAX: 000000000000cc0f RBX: 0000000000010000 RCX: ffffc90002169000 [ 2282.468224][T17911] RDX: 0000000000040000 RSI: ffffffff81a6192d RDI: 0000000000000005 [ 2282.476187][T17911] RBP: ffffc900039cf728 R08: ffffc900039cf728 R09: ffff8880345c08c7 [ 2282.484145][T17911] R10: 0000000000000000 R11: 1ffffffff1a8efc3 R12: 0000000000000000 [ 2282.492148][T17911] R13: 0000000000000110 R14: 0000000000000110 R15: ffff88804672a010 [ 2282.500165][T17911] ? pin_user_pages_locked+0x60d/0x780 [ 2282.505659][T17911] ? pin_user_pages_locked+0x60d/0x780 [ 2282.511135][T17911] get_vaddr_frames+0x788/0x960 [ 2282.515987][T17911] ? mark_held_locks+0x9f/0xe0 [ 2282.520755][T17911] ? kasan_unpoison_shadow+0x33/0x40 [ 2282.526042][T17911] ? frame_vector_destroy+0x70/0x70 [ 2282.531254][T17911] ? kvmalloc_node+0x69/0xf0 [ 2282.535840][T17911] vb2_create_framevec+0x55/0xc0 [ 2282.540774][T17911] vb2_vmalloc_get_userptr+0xce/0x4c0 [ 2282.546142][T17911] ? vb2_vmalloc_dmabuf_ops_attach+0x430/0x430 [ 2282.552426][T17911] __prepare_userptr+0x342/0x15f0 [ 2282.557455][T17911] ? vb2_queue_error+0x60/0x60 [ 2282.562223][T17911] ? tomoyo_path_number_perm+0x441/0x590 [ 2282.567857][T17911] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 2282.573998][T17911] ? stack_trace_consume_entry+0x160/0x160 [ 2282.579813][T17911] ? lock_acquire+0x1f2/0xaa0 [ 2282.584661][T17911] ? __video_do_ioctl+0x550/0xe20 [ 2282.589682][T17911] ? lock_release+0x890/0x890 [ 2282.594354][T17911] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2282.600605][T17911] ? tomoyo_profile+0x42/0x50 [ 2282.605299][T17911] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 2282.611279][T17911] __buf_prepare+0x635/0x7d0 [ 2282.615866][T17911] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 2282.621873][T17911] ? vb2_queue_or_prepare_buf+0x68d/0x2640 [ 2282.627746][T17911] vb2_core_qbuf+0xa9d/0x11c0 [ 2282.632457][T17911] vb2_qbuf+0x135/0x1a0 [ 2282.636617][T17911] ? vb2_ioctl_prepare_buf+0x140/0x140 [ 2282.642069][T17911] vb2_ioctl_qbuf+0xfb/0x140 [ 2282.646663][T17911] v4l_qbuf+0x92/0xc0 [ 2282.650659][T17911] __video_do_ioctl+0xb94/0xe20 [ 2282.655500][T17911] ? v4l_print_control+0x60/0x60 [ 2282.660441][T17911] video_usercopy+0x207/0xe50 [ 2282.665108][T17911] ? v4l_print_control+0x60/0x60 [ 2282.670037][T17911] ? v4l_enumstd+0x60/0x60 [ 2282.674448][T17911] ? __generic_block_fiemap+0x670/0x6a0 [ 2282.680044][T17911] ? __fget_files+0x294/0x400 [ 2282.684716][T17911] v4l2_ioctl+0x1b3/0x250 [ 2282.689097][T17911] ? v4l2_prio_init+0x20/0x20 [ 2282.693844][T17911] __x64_sys_ioctl+0x193/0x200 [ 2282.698603][T17911] do_syscall_64+0x2d/0x70 [ 2282.703102][T17911] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2282.709262][T17911] RIP: 0033:0x45de29 [ 2282.713147][T17911] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2282.732745][T17911] RSP: 002b:00007f3e4c479c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2282.742851][T17911] RAX: ffffffffffffffda RBX: 000000000001c640 RCX: 000000000045de29 [ 2282.750837][T17911] RDX: 0000000020000140 RSI: 00000000c058560f RDI: 0000000000000003 [ 2282.760275][T17911] RBP: 000000000118bf60 R08: 0000000000000000 R09: 0000000000000000 [ 2282.769966][T17911] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118bf2c [ 2282.778600][T17911] R13: 00007ffd80c542ef R14: 00007f3e4c47a9c0 R15: 000000000118bf2c [ 2282.792115][T17911] Kernel Offset: disabled [ 2282.796678][T17911] Rebooting in 86400 seconds..