\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x81, 0x1, 0x3f, 0x0, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0x100011, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1120.871983][ T26] audit: type=1804 audit(1573657052.250:826): pid=8494 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir923645982/syzkaller.aWZZDI/765/file0" dev="sda1" ino=17244 res=1 [ 1120.984118][ T8545] bond11 (uninitialized): Released all slaves 14:57:32 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0x300520, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:57:32 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x81000000}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:57:32 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf00}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:57:32 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, 0x0, 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00020, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1121.304932][ T8563] bond11 (uninitialized): Released all slaves [ 1121.389504][ T8565] device bond279 entered promiscuous mode [ 1121.435250][ T8565] 8021q: adding VLAN 0 to HW filter on device bond279 [ 1121.500600][ T8571] device bond279 left promiscuous mode 14:57:32 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf00}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:57:33 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x88a8ffff}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:57:33 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x81, 0x1, 0x3f, 0x0, 0x0, 0x0, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0x100011, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:57:33 executing program 4: pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000880)={r3, 0x1c, "f8c36c79fe2a279a6b438a38333276d77dc9c5b5e9f99f4a93232b39"}, &(0x7f0000000900)=0x24) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000140)={r3, @in={{0x2, 0x4e22, @broadcast}}, 0x2a5, 0x0, 0x4, 0x2c9, 0x3}, &(0x7f0000000200)=0x98) r4 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x401, 0xc82000) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000000c0)={0x10004, 0x1, 0x6000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) socket$kcm(0x10, 0x2, 0x10) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10, 0x100000) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x8000, 0x0) sendmsg$kcm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000), 0x1}, 0x0) [ 1121.811601][ T8583] bond11 (uninitialized): Released all slaves [ 1121.928405][ T8586] device bond280 entered promiscuous mode [ 1121.962182][ T8586] 8021q: adding VLAN 0 to HW filter on device bond280 14:57:33 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf00}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:57:33 executing program 4: socket$kcm(0x10, 0x2, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r0) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x29, &(0x7f0000000040)=[{&(0x7f0000000080)="2e0000003500050ad25a80648c6356c10224fc0010000b400a000400030082c1b0acea8b0900018004021700d1bd452629bfdec3a977a6c65b1a2e43286ab87f31b58eceedbe788f0d9f34c06fdc8497", 0xfffffffffffffeb8}], 0x1, 0x0, 0xfd71}, 0x0) 14:57:33 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x9effffff}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:57:33 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000016c0)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r1) fstat(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x9, 0x3, &(0x7f0000000480)=[{&(0x7f00000001c0)="0bfd934086515f7dcee6cafa3bbe98c0bb588cd735f22d380b370a9b2c1e9c52c631768a06110721d98d3ee672fa040ac60c33bf33dcf4974ae77527cc8726c9a38dad72adb4baeac673fc277a9fd7b088d7e312f1ef1a4aafb85599804bd2a63f593529a6d9f35e8ec10f0d1161090acf4dee42d2bf51ee7ae5e6f76e4154c6c8bba07795c3", 0x86, 0x4}, {&(0x7f00000002c0)="0134fcec54c16bc99021e243cd9f945f41e72e7150bd3d90cb418bed286222cb3a7b8602cc703b8ea0111fc8cf3058e2efde0bd6fe36ae9b55df45b13abb7c963df94d570a4d2d95854088acf08df812de6c62a3804cbac14266dfe5d6662a2a2f5b67bba42e394c40b51c28ba81949e18138ad6780675f2fb1692b5dfa42b295fd121", 0x83, 0x2}, {&(0x7f0000000380)="f825651108826d2fa6e6925666f103be770cd820bbb5fbb94f02402d1dac0f3819b7cdc89e78b36028b68425ed818f4626643f56b796fd03e6e6995cd0fd3b7390513d8e78deba90a8a6e50b071f4081a7f5e4b932bd5e79967e1f6a5a97bcf136616496a28c2f9f8f008dd65fe29756ffff850043a35678d3bb29d45cccd8df85cb67c8adc8ff14f42b41274250f5dddb1e9532922fb741d8eed9bfc84c1815e5e6c316bc330934734eabe0b52b0212e582989685cb37ec01af17b8417884ede6d8f316db0a426475e537e37288a9ce337a9e1d6ca917", 0xd7, 0x200}], 0x20, &(0x7f0000000580)={[{@codepage={'codepage', 0x3d, 'iso8859-4'}}, {@quiet='quiet'}, {@dir_umask={'dir_umask', 0x3d, 0x2}}, {@part={'part', 0x3d, 0x2}}, {@umask={'umask', 0x3d, 0x1}}, {@creator={'creator', 0x3d, "19693e74"}}, {@uid={'uid', 0x3d, r1}}], [{@smackfshat={'smackfshat', 0x3d, '/'}}, {@audit='audit'}, {@uid_lt={'uid<', r2}}, {@hash='hash'}]}) r3 = socket$kcm(0x10, 0x2, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r4) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000040)="822525eeb881c3c073d804fcfa49fd21", 0x10) sendmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="2e0000003500050ad25a80648c6356c10224fc0010000b400a000400030082c1b0acea8b0900018004021700d1bd", 0x2e}], 0x1}, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) [ 1122.410010][ T8610] device bond11 entered promiscuous mode [ 1122.443284][ T8610] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1122.593493][ T8632] device bond281 entered promiscuous mode [ 1122.612833][ T8632] 8021q: adding VLAN 0 to HW filter on device bond281 14:57:34 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0x400020, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:57:34 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf00}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:57:34 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x2d7, &(0x7f0000000000)=[{&(0x7f0000000100)="2e0000003500050ad25a892ef0042939baff1f7d60648c6356c10224fc0010000b40", 0xfffffffffffffd6b}]}, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x8, 0x20000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000016c0)={0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r2) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r3) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r4) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="7472616e733d756e69782c64666c743c15bf56b09cd18515b23cbb82756964d9131a46e95d8e3775893bb582b0f1070494138eb2cf6194e4ee6d7fec59f57352ae509d78c72b0ad62ce89dbbaed5d2d8033e24d44c4c5c4b4661a3949eaaaaa237db972a70c6525dbc0bd67850f418f39d5300a7489df573babf6f46d05003ab27ff816a7935a8a3d5e1c11f7b692711739c40ffceb8dd967f05000000000000009291f659f490d1252c7ffdc592a4c2a5ebd14e52f9988efe086c5598a20bee33efd34d014c220a18cf1c5a60e6c513aa9f773bcdf53deb7aa331a0ba9503ae5d470601b4dd15c9be66c63d741b23a85820413480a47ce1553a855710d72f0d4fb9ae4ca0260f908c89bae2905bc5c5bdb656bbce4750f1464a94bc87937279b4a39eb88ab9dfdec1e16ae0479a8b19c7d0a891343ca554c84ff2ff020167c92a141815cad2", @ANYRESHEX=r4, @ANYBLOB=',version=9p2000.L,nodevmap,loose,cache=loose,\x00']) r5 = add_key(&(0x7f0000000200)='rxrpc_s\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)="f999b1d3bfee2c5f5ce281d8da3e962b61204fb772d908c82d24c0ef028d050d378ddf5743fe76cb0916bf6e2a148207a4729dae6e1834c830090c07ea22411b680ffa1e10b425ae8b76e33361de07309fef09d3b9e153f549083ab7cc3886ea153d37274a2bc0b4fb6a7b8800b6a1ee2070ed3175044957a8b06d24f8307f7c", 0x80, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000500)='blacklist\x00', &(0x7f0000000540)=@builtin='builtin_trusted\x00') accept4$rose(r0, 0x0, &(0x7f00000000c0), 0x0) ioctl$SIOCRSSCAUSE(r0, 0x89e1, &(0x7f0000000080)=0x200) 14:57:34 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, 0x0, 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xd00020, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:57:34 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xb25727b3}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1122.785392][ T8643] validate_nla: 18 callbacks suppressed [ 1122.785407][ T8643] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 14:57:34 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="2e0000003500050ad25a80648c6356c10224fc0010000b400a000400030082c1b0acea8b0900018004021700d1bd", 0xffffffffffffff9c}], 0x1, 0x0, 0xffffffffffffffc1}, 0x20000020) [ 1122.861791][ T8643] device bond12 entered promiscuous mode [ 1122.891149][ T8643] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1122.968608][ T8657] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 14:57:34 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x81, 0x1, 0x3f, 0x0, 0x0, 0x0, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0x100011, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:57:34 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf00}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:57:34 executing program 4: socket$kcm(0x10, 0x2, 0x10) r0 = fcntl$dupfd(0xffffffffffffffff, 0xc0a, 0xffffffffffffffff) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0xfffffffffffffedd, &(0x7f0000000000)=[{&(0x7f0000000100)="2e0000003500050ad25a80648c6356c10224fc0010000b400a000400030082c1b0acea8b0900018004021700d1bd", 0x14d}], 0x1}, 0x64008001) r1 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000900)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a91690000000042e3d35228897501f93191b076ac446ff0022b8753a1fa748c569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637cef580b4ec24c53d86571ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff33c1e8e036e5031949762d009d308bd73f477252d0000000000004000000000000000000000000000000000195e23", 0xc0, r1) keyctl$get_keyring_id(0x0, r1, 0x8) [ 1123.218986][ T8657] device bond282 entered promiscuous mode [ 1123.254890][ T8657] 8021q: adding VLAN 0 to HW filter on device bond282 [ 1123.295597][ T8669] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1123.381164][ T8669] device bond13 entered promiscuous mode [ 1123.422819][ T8669] 8021q: adding VLAN 0 to HW filter on device bond13 14:57:34 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="2e0000003500050ad25a80648c6356c10224fc0010000b400a000400030082c1b0acea8b0900018004021700d1bd", 0x2e}], 0x1}, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x8000, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000140)={0x81, 0x0, [0xf82, 0x7f, 0x9, 0x3f]}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r2) ioctl$sock_SIOCADDDLCI(r2, 0x8980, &(0x7f0000000040)={'bcsf0\x00', 0x9}) 14:57:35 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xb32757b2}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:57:35 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf00}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1123.655178][ T8687] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1123.748517][ T8687] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1123.768539][ T8699] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1123.884757][ T8699] device bond283 entered promiscuous mode [ 1123.918955][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 1123.919027][ T26] audit: type=1804 audit(1573657055.300:837): pid=8689 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir923645982/syzkaller.aWZZDI/767/file0" dev="sda1" ino=16721 res=1 [ 1123.957242][ T8699] 8021q: adding VLAN 0 to HW filter on device bond283 [ 1124.001754][ T26] audit: type=1804 audit(1573657055.300:838): pid=8693 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir923645982/syzkaller.aWZZDI/767/file0" dev="sda1" ino=16721 res=1 [ 1124.028268][ T8710] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1124.036332][ T26] audit: type=1804 audit(1573657055.370:839): pid=8701 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir400658008/syzkaller.KycbHe/1437/file0/file0" dev="sda1" ino=17268 res=1 [ 1124.097143][ T8710] device bond14 entered promiscuous mode [ 1124.114429][ T26] audit: type=1800 audit(1573657055.370:840): pid=8701 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="file0" dev="sda1" ino=17268 res=0 [ 1124.127972][ T8710] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1124.159544][ T26] audit: type=1804 audit(1573657055.370:841): pid=8707 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir400658008/syzkaller.KycbHe/1437/file0/file0" dev="sda1" ino=17268 res=1 14:57:35 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="2e0000003500050ad25a80648c6356c10224fc0010000b400a000400030082c1b0acea8b0900018004021700d1bd", 0x2e}], 0x1}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x200) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f0000000140)={{0xa, 0x0, 0x4, 0x4, '\x00', 0x800}, 0x3, 0x8, 0x6, r2, 0x2, 0x10000, 'syz1\x00', &(0x7f0000000040)=['keyringppp1:^em0\x00', 'cgroup\x00'], 0x18, [], [0x2ea, 0x9, 0xffff, 0x4]}) 14:57:35 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xc3ffffff}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:57:35 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf00}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:57:35 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, 0x0, 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xe00020, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:57:35 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0x400120, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1124.363125][ T8729] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1124.367336][ T8724] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1124.396348][ T8729] device bond15 entered promiscuous mode [ 1124.402132][ T8729] 8021q: adding VLAN 0 to HW filter on device bond15 14:57:35 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x81, 0x1, 0x3f, 0x0, 0x0, 0x0, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0x100011, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1124.443517][ T8726] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1124.519693][ T8726] device bond284 entered promiscuous mode [ 1124.540704][ T8726] 8021q: adding VLAN 0 to HW filter on device bond284 14:57:36 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf00}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:57:36 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf0ffffff}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:57:36 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="2e0000003500050ad25a80648c6356c10224fc0010000b400a000400030082c1b0acea8b0900018004021700d1bd", 0x2e}], 0x1}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r1) ioctl$VFIO_GET_API_VERSION(r1, 0x3b64) [ 1125.021333][ T8757] device bond16 entered promiscuous mode [ 1125.081799][ T8757] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1125.260124][ T8766] device bond285 entered promiscuous mode 14:57:36 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf00}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1125.305354][ T8766] 8021q: adding VLAN 0 to HW filter on device bond285 14:57:36 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xfcffffff}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:57:36 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="2e0000003500050ad25a80648c6356c10224fc0010000b400a000400030082c1b0acea8b0900018004021700d1bd", 0x2e}], 0x1, 0x0, 0x24}, 0x40000) [ 1125.427198][ T26] audit: type=1804 audit(1573657056.810:842): pid=8772 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir923645982/syzkaller.aWZZDI/768/file0" dev="sda1" ino=16562 res=1 [ 1125.564194][ T26] audit: type=1800 audit(1573657056.810:843): pid=8772 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="file0" dev="sda1" ino=16562 res=0 [ 1125.565284][ T8788] device bond17 entered promiscuous mode [ 1125.615336][ T8788] 8021q: adding VLAN 0 to HW filter on device bond17 [ 1125.647295][ T26] audit: type=1804 audit(1573657056.810:844): pid=8773 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir923645982/syzkaller.aWZZDI/768/file0" dev="sda1" ino=16562 res=1 [ 1125.680113][ T8798] device bond286 entered promiscuous mode [ 1125.727503][ T26] audit: type=1804 audit(1573657057.010:845): pid=8783 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir400658008/syzkaller.KycbHe/1438/file0/file0" dev="sda1" ino=17242 res=1 14:57:37 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x81, 0x1, 0x3f, 0x0, 0x0, 0x101, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0x100011, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:57:37 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000140), 0x0, 0x4) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000040)={0x9, 0x2, 0x6, 0x4f}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000140)=[{r2}], 0x1, 0x200) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000240)=[@window={0x3, 0x2, 0x3}, @timestamp, @mss={0x2, 0x2}, @window={0x3, 0x6}, @window={0x3, 0xfffe, 0x5}], 0x5) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000140)=[{r4}], 0x1, 0x200) ioctl$int_out(r4, 0x2, &(0x7f0000000200)) close(r3) r5 = syz_open_dev$radio(&(0x7f00000002c0)='/dev/radio#\x00', 0x3, 0x2) epoll_wait(r5, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x3) ioctl$KVM_ENABLE_CAP(r3, 0x4068aea3, &(0x7f0000000180)={0x81, 0x0, [0x7fff, 0x8, 0x2, 0x7]}) prctl$PR_CAPBSET_READ(0x17, 0xf) setxattr$security_capability(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='security.capability\x00', &(0x7f0000000400)=@v1={0x1000000, [{0x7, 0xffffff4b}]}, 0xc, 0x3) r6 = dup(r2) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r6, 0x110, 0x4, &(0x7f0000000080)=0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="2e0000003500050ad25a80648c6356c10224fc0010000b400a000400030082c1b0acea8b0900018004021700d1bd", 0x2e}], 0x1}, 0x0) [ 1125.753628][ T26] audit: type=1800 audit(1573657057.010:846): pid=8783 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="file0" dev="sda1" ino=17242 res=0 [ 1125.793751][ T8798] 8021q: adding VLAN 0 to HW filter on device bond286 14:57:37 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, 0x0, 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xf00020, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:57:37 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf00}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:57:37 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0x400220, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:57:37 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xfeffffff}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1126.041227][ T8814] device bond18 entered promiscuous mode [ 1126.083017][ T8814] 8021q: adding VLAN 0 to HW filter on device bond18 [ 1126.226456][ T8825] device bond287 entered promiscuous mode [ 1126.264516][ T8825] 8021q: adding VLAN 0 to HW filter on device bond287 14:57:37 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf00}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:57:37 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xffffa888}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:57:37 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2e0000003500050ad25a80648c6356c10224fc00860cc9b32042746410c210000b400a000400030082c1b0acea8b06021700d1bd00000000", 0x2e}], 0x100000d7}, 0x800) [ 1126.596479][ T8846] device bond19 entered promiscuous mode [ 1126.603100][ T8846] 8021q: adding VLAN 0 to HW filter on device bond19 [ 1126.719430][ T8851] device bond288 entered promiscuous mode [ 1126.764873][ T8851] 8021q: adding VLAN 0 to HW filter on device bond288 14:57:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf00}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1126.843640][ T8853] device bond288 left promiscuous mode 14:57:38 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r1) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)={0x40000000}) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="2e0000003500050ad25a80648c6356c10224fc0010000b400a000400030082c1b0acea8b0900018004021700d1bd", 0x2e}], 0x1}, 0x0) [ 1127.044434][ T8867] bond20 (uninitialized): Released all slaves 14:57:38 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xffffff7f}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:57:38 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x81, 0x1, 0x3f, 0x0, 0x0, 0x101, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0x100011, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:57:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf00}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:57:38 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, 0x0, 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xf0ff7f, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:57:38 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000280), 0x0) [ 1127.338492][ T8880] device bond289 entered promiscuous mode 14:57:38 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0x400320, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1127.387973][ T8880] 8021q: adding VLAN 0 to HW filter on device bond289 [ 1127.505180][ T8897] bond20 (uninitialized): Released all slaves 14:57:39 executing program 4: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000002c0)="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", 0x1000, 0xfffffffffffffffe) r1 = geteuid() pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000140)=[{r2}], 0x1, 0x200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) keyctl$chown(0x4, r0, r1, r3) r4 = socket$kcm(0x10, 0x2, 0x10) syz_open_dev$radio(&(0x7f0000000180)='/dev/radio#\x00', 0x1, 0x2) sendmsg$kcm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="2e0000003500050ad25a80648c6356c10224fc0010000b400a000400030082c1b0acea8b0900018004021700d1bd", 0x2e}], 0x1}, 0x0) 14:57:39 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xffffff9e}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:57:39 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf00}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1127.926982][ T8921] validate_nla: 18 callbacks suppressed [ 1127.926991][ T8921] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1127.953382][ T8922] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1128.043765][ T8922] bond20 (uninitialized): Released all slaves [ 1128.078004][ T8923] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1128.192933][ T8923] device bond290 entered promiscuous mode [ 1128.238938][ T8923] 8021q: adding VLAN 0 to HW filter on device bond290 14:57:39 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf00}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:57:39 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x81, 0x1, 0x3f, 0x0, 0x0, 0x101, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0x100011, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1128.392215][ T8936] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 14:57:39 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xffffffc3}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:57:39 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x0, 0x0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0xb) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="2e0000003500050ad25a80648c6356c10224fc0010000b400a000400030082c1b0acea8b0900018004021700d1bd", 0x2e}], 0x1}, 0x0) [ 1128.527699][ T8939] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1128.667080][ T8939] bond20 (uninitialized): Released all slaves [ 1128.709679][ T8947] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1128.718381][ T8950] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1128.787949][ T8950] device bond291 entered promiscuous mode 14:57:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf00}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:57:40 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, 0x0, 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:57:40 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0x400420, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:57:40 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x8080, 0x0) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="2e0000003500050ad25a80648c6356c10224fc0010000b400a000400030082c1b0acea8b0900018004021700d1bd", 0x2e}], 0x1}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000140)=[{r2}], 0x1, 0x200) connect$x25(r2, &(0x7f0000000140)={0x9, @null=' \x00'}, 0x12) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r3) ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000080)={0x0, 0x80000001}) [ 1128.828924][ T8950] 8021q: adding VLAN 0 to HW filter on device bond291 [ 1129.028126][ T8971] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 14:57:40 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xfffffff0}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1129.061846][ T8972] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1129.150430][ T8971] bond20 (uninitialized): Released all slaves [ 1129.210376][ T8984] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 14:57:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf00}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1129.277412][ T8984] device bond292 entered promiscuous mode [ 1129.328796][ T8984] 8021q: adding VLAN 0 to HW filter on device bond292 14:57:40 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xfffffffc}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1129.510252][ T8994] bond20 (uninitialized): Released all slaves 14:57:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf00}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:57:41 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x81, 0x1, 0x3f, 0x0, 0x0, 0x101, 0x4004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0x100011, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:57:41 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x200) recvfrom$unix(r0, &(0x7f0000000040)=""/155, 0x9b, 0x2000, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="2e0000003500050ad25a80648c6356c10224fc0010000b400a000400030082c1b0acea8b0900018004021700d1bd", 0x2e}], 0x1}, 0x0) [ 1129.855930][ T8999] device bond293 entered promiscuous mode [ 1129.906942][ T8999] 8021q: adding VLAN 0 to HW filter on device bond293 [ 1129.970183][ T9006] bond20 (uninitialized): Released all slaves [ 1130.048440][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 1130.048467][ T26] audit: type=1804 audit(1573657061.430:855): pid=9005 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir923645982/syzkaller.aWZZDI/771/file0" dev="sda1" ino=17285 res=1 [ 1130.099688][ T9002] device bond294 entered promiscuous mode [ 1130.124837][ T9002] 8021q: adding VLAN 0 to HW filter on device bond294 14:57:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf00}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:57:41 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xfffffffe}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1130.233146][ T26] audit: type=1800 audit(1573657061.430:856): pid=9005 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="file0" dev="sda1" ino=17285 res=0 [ 1130.306505][ T26] audit: type=1804 audit(1573657061.430:857): pid=9009 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir923645982/syzkaller.aWZZDI/771/file0" dev="sda1" ino=17285 res=1 [ 1130.317020][ T9036] bond20 (uninitialized): Released all slaves 14:57:41 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0x500020, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:57:41 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, 0x0, 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x2, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:57:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf00}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1130.428260][ T26] audit: type=1804 audit(1573657061.500:858): pid=8988 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir400658008/syzkaller.KycbHe/1441/file0/file0" dev="sda1" ino=17294 res=1 [ 1130.475757][ T9041] device bond295 entered promiscuous mode [ 1130.494889][ T9041] 8021q: adding VLAN 0 to HW filter on device bond295 [ 1130.564056][ T26] audit: type=1800 audit(1573657061.500:859): pid=8988 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="file0" dev="sda1" ino=17294 res=0 14:57:42 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x200) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000040)={[0xc046, 0xa4f, 0x8, 0x3, 0x2, 0x4, 0xff, 0x0, 0x7ff, 0x100000000, 0x3, 0x1, 0x1, 0x0, 0x5, 0xfffffffffffffe00], 0x5000, 0x180000}) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="2e0000003500050ad25a80648c6356c10224fc0010000b400a000400030082c1b0acea8b0900018004021700d1bd", 0x2e}], 0x1}, 0x0) [ 1130.657617][ T9050] bond20 (uninitialized): Released all slaves 14:57:42 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1130.685638][ T26] audit: type=1804 audit(1573657061.500:860): pid=9020 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir400658008/syzkaller.KycbHe/1441/file0/file0" dev="sda1" ino=17294 res=1 14:57:42 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r2, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0xf00}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1130.941074][ T9067] device bond296 entered promiscuous mode [ 1130.947248][ T9067] 8021q: adding VLAN 0 to HW filter on device bond296 14:57:42 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x81, 0x1, 0x3f, 0x0, 0x0, 0x101, 0x4004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0x100011, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:57:42 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0x2}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:57:42 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r2, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0xf00}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1131.301988][ T9079] device bond297 entered promiscuous mode [ 1131.359965][ T9079] 8021q: adding VLAN 0 to HW filter on device bond297 14:57:42 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="2e0000003500050ad25a80648c6356c10224fc0010000b400a000400030082c1b0acea8b0900018004021700d1bd", 0x2e}], 0x1}, 0x0) r1 = syz_open_dev$radio(&(0x7f00000004c0)='/dev/radio#\x00', 0x2, 0x2) ioctl$TIOCNOTTY(r1, 0x5422) ioctl$ASHMEM_GET_SIZE(r1, 0x7704, 0x0) r2 = syz_open_dev$amidi(&(0x7f0000000440)='/dev/amidi#\x00', 0xffffffff00000000, 0x20000) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000480)={0x1000, 0x4, 0x0, 0x8, 0x6, 0x7ff, 0x3}) sendmsg$kcm(r0, &(0x7f0000000400)={&(0x7f0000000040)=@llc={0x1a, 0x4, 0x80, 0x94, 0x1, 0x1f, @remote}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000140)="b7159f2d5bc87fd6e764fea75f4fd1fd0a2befe2c9231e177ada4d177cee91f1934ea70bad021a5ddf0f1ba75b9cc93e3670c889c7e07755cb31f34ddd6dd21439ace5", 0x43}, {&(0x7f00000000c0)="dac8d0ff62575702bde78eba61cc85bab38eff224e01f7559a6ea9cbbb6f605bd57f19b554f0022813eb32f9b380030d", 0x30}, {&(0x7f00000002c0)="c92b263c24c2bc5c23f44138ec5cf18e8b99cb57de6c9655fb7e104c3e10a2253fa7e99a6923c2e1e6ffa7a39e0c01b6aed0e71894ff32fbb1faa2ba9a8e4be7e72e8024cc67e91f7b4572fd1e757ff2393b93252b07914976bca28f26dfd513fa5cf56aa9400e65cfc351a2a89e6bbd0c75c439275a14828bf638c239481d128d0d8eb15c3f2fef901d728c9827a5ae0ae7dd5734e1b03afe615933224e9f2bfa4b4460df895b83df896a540dab9669dff13e2cd121f503b525f60b5dfefde1d7beeadf4052bce4f7c5f9cd4d24852c2b5b9f9261956e73f374e3e9d7b368c089aa9b60563b38ad1537", 0xea}, {&(0x7f00000001c0)="e5305b4b17f149186c459ca951e35da1b9286d71b0d95a03e6d629dc76f659b88d32c7f7e43824316d7c85f232b0d60bbd926c826e24cbc650a051dc7a3de34396a9b6d8ddade64aa551bcf7d14fdb83d43db52d1607d15c2075a80919f82ccc5994239c83d870201d4ab60b219163b81b0f8646accf70c0a7d5d89525e27cdb25e2f606f0c48d793479939429fd2f38a5f94fba2cfc734bb508f7e23e26b616b204e51dffbbd05cc0d7c9cf7e22f55fae588f03b371bfdc655aea8712934c04", 0xc0}], 0x4}, 0x4000082) 14:57:43 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r2, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0xf00}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:57:43 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0x3}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1131.664470][ T26] audit: type=1804 audit(1573657063.040:861): pid=9069 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir923645982/syzkaller.aWZZDI/772/file0" dev="sda1" ino=17300 res=1 [ 1131.778174][ T26] audit: type=1800 audit(1573657063.040:862): pid=9069 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="file0" dev="sda1" ino=17300 res=0 [ 1131.841164][ T26] audit: type=1804 audit(1573657063.040:863): pid=9092 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir923645982/syzkaller.aWZZDI/772/file0" dev="sda1" ino=17300 res=1 [ 1131.882293][ T26] audit: type=1804 audit(1573657063.110:864): pid=9095 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir400658008/syzkaller.KycbHe/1442/file0/file0" dev="sda1" ino=17304 res=1 [ 1131.954674][ T9115] device bond298 entered promiscuous mode [ 1132.001782][ T9115] 8021q: adding VLAN 0 to HW filter on device bond298 14:57:43 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0x500120, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:57:43 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf00}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:57:43 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x101001, 0x0) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000080)={0x1, 0x1000, 0x1}) r2 = syz_open_dev$swradio(&(0x7f00000001c0)='/dev/swradio#\x00', 0x1, 0x2) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$unix(0x1, 0x5, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r4, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) connect(r5, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r6 = gettid() r7 = gettid() r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) lstat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$security_capability(r8, &(0x7f0000000140)='security.capability\x00', &(0x7f0000000680)=@v3={0x3000000, [{0x1, 0x1}, {0x4, 0x1ff}], r9}, 0x18, 0x2) r10 = getegid() sendmmsg$unix(r5, &(0x7f0000003f40)=[{&(0x7f0000000040)=@abs, 0x6e, 0x0, 0x0, &(0x7f00000001c0)=[@cred={{0x1c, 0x1, 0x2, {r7, r9, r10}}}, @cred={{0x1c, 0x1, 0x2, {r6}}}, @rights={{0x14, 0x600, 0x1, [r4]}}, @cred={{0x1c, 0x1, 0x2, {r7}}}], 0x78}], 0x1, 0x4004) mount$fuseblk(&(0x7f00000000c0)='/dev/loop0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='fuseblk\x00', 0x414400, &(0x7f0000000340)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r10}, 0x2c, {[{@allow_other='allow_other'}, {@allow_other='allow_other'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x800}}], [{@fsname={'fsname', 0x3d, '/dev/dsp\x00'}}]}}) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="2e0000003500050ad25a80648c6356c10224fc0010000b400a000400030082c1b0acea8b0900018004021700d1bd", 0x2e}], 0x1}, 0x0) 14:57:43 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, 0x0, 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x3, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1132.131283][ T9117] device bond299 entered promiscuous mode [ 1132.148792][ T9117] 8021q: adding VLAN 0 to HW filter on device bond299 14:57:43 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf00}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:57:43 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0x4}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:57:43 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x81, 0x1, 0x3f, 0x0, 0x0, 0x101, 0x4004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0x100011, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:57:43 executing program 4: r0 = socket$kcm(0x10, 0x7, 0x10) faccessat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100, 0x1000) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r1) accept$alg(r1, 0x0, 0x0) accept(r0, &(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}}, &(0x7f0000000080)=0x80) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000001c0)={0x1, 0x9}) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="2e0000003500050ad25a80648c6356c10224fc0010000b400a000400030082c1b0acea8b0900018004021700d1bd", 0x2e}], 0x1}, 0x0) 14:57:43 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf00}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:57:44 executing program 4: r0 = socket$kcm(0x10, 0x4eacad6e92d437e1, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x200) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x40400, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e20, 0x1, @loopback, 0x9}}}, &(0x7f0000000240)=0x84) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000002c0)={r2, @in={{0x2, 0x4e20, @multicast2}}}, 0x84) ioctl$KVM_GET_MSR_INDEX_LIST(r1, 0xc004ae02, &(0x7f0000000040)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000380)="1e4f274150e2629b27efeafa6701357f222e956b2c2179bb8151545b8c6661c17596658189ccb2c4adc190048aeae8fa113e9343fd254950c45f59b16dada049820784b0d8b4e379dcc545ef8830f5f958d902f249aec2ffc082366aa412b943522a5cab6b9d9f3c2a38eb362f1bfc914f904bdb476d3d1e791744152e32a8711603d73fc3bc28f713659b23c8249713066127cc5a529b4cbdb538e263d36903fed993fc9d9d2cf5db57ddc8beea22e776cd5d218f2b0e939555509680825f13d1024a30740d089003b1841d6d8e3c9938e09ac162ff04119826e862b9c2545e3b20e9d0a17568f59ae76e62"}, {&(0x7f0000000480)="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"}, {&(0x7f0000001480)="2aa3fdf5b1938ddea09628396f59444ffd188eba09cebc556b0fa51bcece0f16738dc7df2ac52641b08d1ecb3129b812e9ee2818603e0178487e86cdbec68705f8d10751a08370d32b09ea4d7f21709e3b8e888cc6f44fbcd5850f478575170ed243428aecc0c6490b6ae8a873d2b9238f122d1bc441c1e5121b103eb4e37af39dc9d25a8b4dcf46409f637249d5d7ac0454e1254815d42a0a2ffdb2756010af45a308b941bf6813a0bd0b99d78b5d2509423a93166bbb31b884e3ad500abd8ec665293010b2079e2cff8386f09b86eff0f5b80e568703293f1bf3fd1c9c54c186d281fbb9b3"}, {&(0x7f0000001580)="f136ae7b117acd924bd2ff7721ea6bd813893422620448c23e570bee6740c63b4802f8bcc775bdb552464587e7b775985cf036654ffd2d98d0ee1706a1308c053dd8a8f95a86594643a5247de61eb57e823056840ef9b8c6b49fa11d0aa73305ddbeb46b5c81bd507e4339852b5a8897b9c6e1cfa9a1d2e20fccb81bb15db7864a969198649520f1be74cae27f18a8b38b59b75f52620abf12c46b1bfbe1c73f7af4e59af36a6681c87e193c85479f92f5c33b0df58e64dc80ed5264"}, {&(0x7f0000001640)="8b7bd7056110950ff2c97a0f88e80ff7133c605cb8e95c2a858718cf5d659491fc96025e27a95f77025329867e854a2c016592dbde53d082f9f2abf54128f7808abd14b6323e"}, {&(0x7f00000016c0)="f3f75b0dffd0df1fd2e1833e9a1b4b265a52be4bfac685529c72b006a59ba4a086ec642bb9d228947ff4a35482b0867f87926255551f3f6e8cbff51da173b6b96fb7ca964aeb5a4a4618d18e5df0410b3245cc4f977782a6d7de6a8f3893c7635b8f1ba2090c7827af47ff730142ac614d73f5cc130afb1fbff3363a14f89eeb70c9d586d807c8c62c66645fa87b08adb99d9f9008c1c835d1568be017644bf8e82a25a91d732946c648b3ab22f96337881a1e9cad5873a87c42435c7d94c9f3640db347b41d7fcc9bc25c7a781e6852355366d04f321a61fce5d42f720cec3db2a3dd101f4aa7ac0cd5b641a19cfd41d4"}, {&(0x7f00000017c0)="4dcb8bcc65d7dcb1b500d5d7da18f40b155201af886f891643edbf22faac381b7612719c2b6cb90f9cc0258d61ed6829072b7e09354ac3bac4336109c9b6fd173358ff271805e53fda72a07c3896e9e9597f5e5b6289db917262f9893a6a707d7a09a84c80f594e3082b838cdd31bded39024f95300b00cd93815506ba667d82e2d047c02aa703c7e8bff8ffa792fbdc8389a2570ff558853841906ed988cf76b7640d059ed45fbee602c14c53de1b85afbe3f4a6628db99d9cf2b009789482f51517907047bb40f2de049e17bc19f4af736ef2c"}, {&(0x7f00000018c0)="ecfe5077d8bf1c2865a46ca3ca622c5ac00f", 0x339}, {&(0x7f0000001900)="c6002d7d54b536e6e8f7e5a6bbb44527927ccbfe031dbfd8f2e78a21a1f170aaac071ec50000"}], 0x1, 0x0, 0x276}, 0x20000001) [ 1132.668449][ T9146] device bond300 entered promiscuous mode [ 1132.704982][ T9146] 8021q: adding VLAN 0 to HW filter on device bond300 14:57:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf00}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:57:44 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0x6}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1133.089320][ T9174] validate_nla: 21 callbacks suppressed [ 1133.089330][ T9174] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1133.220872][ T9174] device bond301 entered promiscuous mode [ 1133.243305][ T9174] 8021q: adding VLAN 0 to HW filter on device bond301 14:57:45 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0x500220, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:57:45 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0xa}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:57:45 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, 0x0, 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x4, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:57:45 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf00}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:57:45 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r1) r2 = openat(r1, &(0x7f0000000040)='./file0\x00', 0x1800, 0x180) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x3, 0x20}, &(0x7f00000000c0)=0xc) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="2e0000003500050ad25a80648c6356c10224fc0010000b400a000400030082c1b0acea8b0900018004021700d1bd", 0x2e}], 0x1}, 0x0) [ 1133.686187][ T9197] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1133.750276][ T9205] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 14:57:45 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x81, 0x1, 0x3f, 0x0, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0x100011, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:57:45 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="30513f39ed3932eca9d0bf9528e70000", @ANYRES16=r3, @ANYBLOB="3f02000000000000000001000000000000000c4100000014001462726f6164636173742d6c696e6b0000"], 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x100, 0x70bd29, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x841}, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="2e0000003500050ad25a80648c6356c10224fc0010000b400a000400030082c1b0acea8b0900018004021700d1bd", 0x2e}], 0x1}, 0x0) [ 1133.921052][ T9205] device bond302 entered promiscuous mode [ 1133.961007][ T9205] 8021q: adding VLAN 0 to HW filter on device bond302 14:57:45 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf00}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1134.080701][ T9223] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 14:57:45 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0xc}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:57:45 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30}, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x23, 0x1, @tid=r1}, &(0x7f0000000080)=0x0) timer_settime(r2, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, &(0x7f0000000140)) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="2e0000003500050ad25a80648c6356c10224fc0010000b400a000400030082c1b0acea8b0900018004021700d1bd", 0x2e}], 0x1}, 0x0) 14:57:45 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf00}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1134.423937][ T9235] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1134.531372][ T9245] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1134.564324][ T9235] device bond303 entered promiscuous mode [ 1134.586703][ T9235] 8021q: adding VLAN 0 to HW filter on device bond303 14:57:46 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf00}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:57:46 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0x500320, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:57:46 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0xe}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:57:46 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf00}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:57:46 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, 0x0, 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x5, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1135.249760][ T9277] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 14:57:46 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x81, 0x1, 0x3f, 0x0, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0x100011, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1135.326808][ T9277] device bond304 entered promiscuous mode [ 1135.358811][ T9277] 8021q: adding VLAN 0 to HW filter on device bond304 14:57:46 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3], 0x2}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf00}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:57:46 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0xf}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1135.751560][ T9302] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 14:57:47 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3], 0x2}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf00}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1135.861472][ T9302] device bond305 entered promiscuous mode [ 1135.922055][ T9302] 8021q: adding VLAN 0 to HW filter on device bond305 14:57:47 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3], 0x2}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf00}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:57:47 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0x10}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1136.283909][ T26] kauditd_printk_skb: 14 callbacks suppressed [ 1136.283927][ T26] audit: type=1804 audit(1573657067.660:879): pid=9312 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir923645982/syzkaller.aWZZDI/775/file0" dev="sda1" ino=17324 res=1 [ 1136.309113][ T9331] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 14:57:47 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB], 0x3}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf00}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1136.405547][ T26] audit: type=1800 audit(1573657067.700:880): pid=9312 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="file0" dev="sda1" ino=17324 res=0 [ 1136.473607][ T9331] device bond306 entered promiscuous mode [ 1136.493691][ T26] audit: type=1804 audit(1573657067.720:881): pid=9315 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir923645982/syzkaller.aWZZDI/775/file0" dev="sda1" ino=17324 res=1 [ 1136.511188][ T9331] 8021q: adding VLAN 0 to HW filter on device bond306 [ 1136.567015][ T26] audit: type=1804 audit(1573657067.770:882): pid=9320 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir400658008/syzkaller.KycbHe/1445/file0/file0" dev="sda1" ino=17325 res=1 14:57:48 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB], 0x3}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf00}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:57:48 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0x500420, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:57:48 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0x60}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:57:48 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, 0x0, 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x6, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:57:48 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x81, 0x1, 0x3f, 0x0, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0x100011, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1136.695350][ T26] audit: type=1800 audit(1573657067.770:883): pid=9320 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="file0" dev="sda1" ino=17325 res=0 [ 1136.771039][ T26] audit: type=1804 audit(1573657067.780:884): pid=9324 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir400658008/syzkaller.KycbHe/1445/file0/file0" dev="sda1" ino=17325 res=1 [ 1136.786087][ T9344] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 14:57:48 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB], 0x3}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf00}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1136.894761][ T9344] device bond307 entered promiscuous mode [ 1136.926124][ T9344] 8021q: adding VLAN 0 to HW filter on device bond307 14:57:48 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746"], 0x3}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf00}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:57:48 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0x300}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:57:48 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746"], 0x3}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf00}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1137.426517][ T9378] device bond308 entered promiscuous mode [ 1137.462930][ T9378] 8021q: adding VLAN 0 to HW filter on device bond308 [ 1137.553236][ T9380] device bond308 left promiscuous mode 14:57:49 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746"], 0x3}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf00}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:57:49 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0x600}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:57:49 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb"], 0x3}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf00}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1137.882509][ T26] audit: type=1804 audit(1573657069.260:885): pid=9385 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir923645982/syzkaller.aWZZDI/776/file0" dev="sda1" ino=16593 res=1 14:57:49 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x81, 0x1, 0x3f, 0x0, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0x100011, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1137.961551][ T9399] device bond309 entered promiscuous mode [ 1137.980265][ T26] audit: type=1800 audit(1573657069.300:886): pid=9385 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="file0" dev="sda1" ino=16593 res=0 [ 1138.003953][ T9399] 8021q: adding VLAN 0 to HW filter on device bond309 [ 1138.064156][ T26] audit: type=1804 audit(1573657069.300:887): pid=9386 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir923645982/syzkaller.aWZZDI/776/file0" dev="sda1" ino=16593 res=1 [ 1138.141836][ T26] audit: type=1804 audit(1573657069.500:888): pid=9397 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir400658008/syzkaller.KycbHe/1446/file0/file0" dev="loop0" ino=777 res=1 14:57:49 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0x600020, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:57:49 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, 0x0, 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x7, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:57:49 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0xa00}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:57:49 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb"], 0x3}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf00}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1138.547540][ T9424] validate_nla: 2 callbacks suppressed [ 1138.547550][ T9424] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1138.727876][ T9424] device bond310 entered promiscuous mode [ 1138.769513][ T9424] 8021q: adding VLAN 0 to HW filter on device bond310 14:57:50 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0xc00}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:57:50 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb"], 0x3}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf00}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1139.087488][ T9442] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 14:57:50 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd5"], 0x3}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf00}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1139.198608][ T9442] device bond311 entered promiscuous mode [ 1139.253014][ T9442] 8021q: adding VLAN 0 to HW filter on device bond311 14:57:50 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x81, 0x1, 0x3f, 0x0, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0x100011, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:57:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd5"], 0x3}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf00}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:57:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0xe00}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:57:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd5"], 0x3}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf00}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1139.925324][ T9474] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1140.031172][ T9474] device bond312 entered promiscuous mode 14:57:51 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, 0x0, 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x8, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1140.071518][ T9474] 8021q: adding VLAN 0 to HW filter on device bond312 14:57:51 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0x600120, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:57:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611"], 0x3}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf00}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:57:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0xf00}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1140.513804][ T9495] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 14:57:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611"], 0x3}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf00}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1140.644267][ T9495] device bond313 entered promiscuous mode [ 1140.680339][ T9495] 8021q: adding VLAN 0 to HW filter on device bond313 14:57:52 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x81, 0x1, 0x3f, 0x0, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0x100011, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1140.729444][ T9498] device bond313 left promiscuous mode 14:57:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611"], 0x3}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf00}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:57:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0x3f00}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:57:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4"], 0x3}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf00}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:57:52 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, 0x0, 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x9, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1141.341090][ T9523] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1141.462111][ T9523] device bond314 entered promiscuous mode [ 1141.479291][ T26] kauditd_printk_skb: 5 callbacks suppressed 14:57:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4"], 0x3}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf00}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1141.479310][ T26] audit: type=1804 audit(1573657072.860:894): pid=9503 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir400658008/syzkaller.KycbHe/1448/file0/file0" dev="sda1" ino=16945 res=1 [ 1141.527124][ T9523] 8021q: adding VLAN 0 to HW filter on device bond314 [ 1141.581927][ T9530] device bond314 left promiscuous mode [ 1141.743283][ T26] audit: type=1800 audit(1573657072.890:895): pid=9503 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="file0" dev="sda1" ino=16945 res=0 14:57:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4"], 0x3}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf00}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:57:53 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0x4000}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1141.819352][ T26] audit: type=1804 audit(1573657072.930:896): pid=9525 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir400658008/syzkaller.KycbHe/1448/file0/file0" dev="sda1" ino=16945 res=1 14:57:53 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0x600220, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:57:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b"], 0x3}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf00}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1142.013529][ T9550] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 14:57:53 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x81, 0x1, 0x3f, 0x0, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0x100011, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1142.123075][ T9550] device bond315 entered promiscuous mode [ 1142.142972][ T9550] 8021q: adding VLAN 0 to HW filter on device bond315 14:57:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b"], 0x3}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf00}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:57:53 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0x5865}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:57:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b"], 0x3}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf00}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1142.609478][ T9581] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1142.639465][ T26] audit: type=1804 audit(1573657074.020:897): pid=9538 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir923645982/syzkaller.aWZZDI/779/file0" dev="sda1" ino=17025 res=1 [ 1142.705809][ T9581] device bond316 entered promiscuous mode [ 1142.735060][ T9581] 8021q: adding VLAN 0 to HW filter on device bond316 14:57:54 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, 0x0, 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0xa, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:57:54 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0x6000}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:57:54 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b"], 0x3}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf00}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:57:54 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b"], 0x3}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf00}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1143.106353][ T9601] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1143.129256][ T26] audit: type=1804 audit(1573657074.510:898): pid=9563 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir400658008/syzkaller.KycbHe/1449/file0/file0" dev="sda1" ino=17009 res=1 [ 1143.198898][ T9601] device bond317 entered promiscuous mode [ 1143.203634][ T26] audit: type=1800 audit(1573657074.540:899): pid=9563 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="file0" dev="sda1" ino=17009 res=0 [ 1143.225750][ T9601] 8021q: adding VLAN 0 to HW filter on device bond317 [ 1143.281898][ T26] audit: type=1804 audit(1573657074.550:900): pid=9564 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir400658008/syzkaller.KycbHe/1449/file0/file0" dev="sda1" ino=17009 res=1 14:57:54 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x81, 0x1, 0x3f, 0x0, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0x100011, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:57:54 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0x6558}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:57:54 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0x600320, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:57:54 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b"], 0x3}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf00}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1143.534113][ T9611] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1143.575212][ T9611] device bond318 entered promiscuous mode [ 1143.586837][ T26] audit: type=1804 audit(1573657074.970:901): pid=9604 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir923645982/syzkaller.aWZZDI/780/file0" dev="sda1" ino=17025 res=1 [ 1143.646468][ T9611] 8021q: adding VLAN 0 to HW filter on device bond318 [ 1143.837897][ T9614] device bond318 left promiscuous mode 14:57:55 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x2}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf00}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:57:55 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0x8100}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:57:55 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, 0x0, 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0xb, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:57:55 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x2}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf00}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1144.219838][ T9645] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1144.349460][ T9645] device bond319 entered promiscuous mode [ 1144.397125][ T9645] 8021q: adding VLAN 0 to HW filter on device bond319 [ 1144.469553][ T9649] device bond319 left promiscuous mode 14:57:56 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x2}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf00}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:57:56 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0x1000000}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:57:56 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x81, 0x1, 0x3f, 0x0, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0x100011, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1144.766131][ T9667] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 14:57:56 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf00}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:57:56 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0x600420, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1144.861738][ T9667] device bond320 entered promiscuous mode [ 1144.884959][ T9667] 8021q: adding VLAN 0 to HW filter on device bond320 [ 1144.966824][ T9674] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 14:57:56 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0x2000000}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1145.024723][ T26] audit: type=1804 audit(1573657076.400:902): pid=9647 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir923645982/syzkaller.aWZZDI/781/file0" dev="sda1" ino=16721 res=1 [ 1145.063888][ T9674] bond20 (uninitialized): Released all slaves 14:57:56 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf00}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1145.254978][ T9689] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 14:57:56 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, 0x0, 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0xc, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1145.409024][ T9689] device bond321 entered promiscuous mode [ 1145.446592][ T9689] 8021q: adding VLAN 0 to HW filter on device bond321 [ 1145.490302][ T9703] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1145.556404][ T9703] bond20 (uninitialized): Released all slaves [ 1145.598187][ T9694] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 14:57:57 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf00}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:57:57 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0x3000000}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1145.987912][ T9720] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1146.069961][ T26] audit: type=1804 audit(1573657077.450:903): pid=9696 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir400658008/syzkaller.KycbHe/1451/file0/file0" dev="loop0" ino=786 res=1 [ 1146.080976][ T9720] device bond322 entered promiscuous mode [ 1146.140941][ T9720] 8021q: adding VLAN 0 to HW filter on device bond322 [ 1146.158441][ T9721] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 14:57:57 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x81, 0x1, 0x3f, 0x0, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0x100011, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1146.187449][ T9721] bond20 (uninitialized): Released all slaves 14:57:57 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0x700020, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:57:57 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0x4000000}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:57:57 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x2}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf00}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1146.507954][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 1146.507986][ T26] audit: type=1804 audit(1573657077.890:905): pid=9709 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir923645982/syzkaller.aWZZDI/782/file0" dev="sda1" ino=16897 res=1 [ 1146.582185][ T9747] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 14:57:58 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, 0x0, 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0xd, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1146.736799][ T9747] device bond323 entered promiscuous mode [ 1146.764816][ T9747] 8021q: adding VLAN 0 to HW filter on device bond323 14:57:58 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0x6000000}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:57:58 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x2}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf00}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1147.159866][ T9771] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1147.290274][ T9771] device bond324 entered promiscuous mode [ 1147.332494][ T9771] 8021q: adding VLAN 0 to HW filter on device bond324 [ 1147.460496][ T26] audit: type=1804 audit(1573657078.840:906): pid=9748 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir400658008/syzkaller.KycbHe/1452/file0/file0" dev="sda1" ino=16705 res=1 14:57:58 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x2}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf00}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:57:59 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0xa000000}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1147.588126][ T26] audit: type=1800 audit(1573657078.890:907): pid=9748 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="file0" dev="sda1" ino=16705 res=0 [ 1147.689359][ T26] audit: type=1804 audit(1573657078.890:908): pid=9780 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir400658008/syzkaller.KycbHe/1452/file0/file0" dev="sda1" ino=16705 res=1 14:57:59 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf00}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:57:59 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x81, 0x1, 0x3f, 0x0, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0x100011, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1147.864516][ T26] audit: type=1804 audit(1573657079.240:909): pid=9765 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir923645982/syzkaller.aWZZDI/783/file0" dev="sda1" ino=16706 res=1 [ 1147.899422][ T9798] device bond325 entered promiscuous mode 14:57:59 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0x700120, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1147.932847][ T9798] 8021q: adding VLAN 0 to HW filter on device bond325 14:57:59 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, 0x0, 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0xe, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:57:59 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf00}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:57:59 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0xc000000}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:57:59 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf00}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1148.492951][ T9828] device bond326 entered promiscuous mode [ 1148.524921][ T9828] 8021q: adding VLAN 0 to HW filter on device bond326 14:58:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0xe000000}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:58:00 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c000000100005070000", @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf00}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1148.979833][ T9845] device bond327 entered promiscuous mode 14:58:00 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x81, 0x1, 0x3f, 0x0, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0x100011, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1149.074918][ T9845] 8021q: adding VLAN 0 to HW filter on device bond327 14:58:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0xf000000}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:58:00 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c000000100005070000", @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf00}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1149.195202][ T26] audit: type=1804 audit(1573657080.580:910): pid=9829 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir400658008/syzkaller.KycbHe/1453/file0/file0" dev="sda1" ino=16834 res=1 [ 1149.271796][ T26] audit: type=1800 audit(1573657080.580:911): pid=9829 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="file0" dev="sda1" ino=16834 res=0 [ 1149.331968][ T9863] validate_nla: 3 callbacks suppressed [ 1149.331978][ T9863] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1149.332844][ T26] audit: type=1804 audit(1573657080.580:912): pid=9847 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir400658008/syzkaller.KycbHe/1453/file0/file0" dev="sda1" ino=16834 res=1 [ 1149.371482][ T26] audit: type=1804 audit(1573657080.630:913): pid=9824 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir923645982/syzkaller.aWZZDI/784/file0" dev="sda1" ino=16914 res=1 [ 1149.397389][ T9863] device bond328 entered promiscuous mode 14:58:00 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, 0x0, 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0xf, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1149.496028][ T9863] 8021q: adding VLAN 0 to HW filter on device bond328 14:58:00 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0x700220, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:58:01 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c000000100005070000", @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf00}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:58:01 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0x10000000}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:58:01 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700000000000000", @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf00}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1149.916730][ T9895] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1150.026534][ T9895] device bond329 entered promiscuous mode [ 1150.047139][ T9895] 8021q: adding VLAN 0 to HW filter on device bond329 14:58:01 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700000000000000", @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf00}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:58:01 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0x3f000000}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1150.310148][ T26] audit: type=1804 audit(1573657081.690:914): pid=9884 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir923645982/syzkaller.aWZZDI/785/file0" dev="sda1" ino=16593 res=1 14:58:01 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x81, 0x1, 0x3f, 0x0, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0x100011, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1150.404033][ T9910] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 14:58:01 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700000000000000", @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf00}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1150.584272][ T9910] device bond330 entered promiscuous mode [ 1150.607621][ T9910] 8021q: adding VLAN 0 to HW filter on device bond330 14:58:02 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000280), 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x200) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r2) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000000)={0x0}) r4 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x3, 0x400800) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r3, 0x80000, r4}) 14:58:02 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, 0x0, 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x10, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:58:02 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/18, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf00}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:58:02 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0x40000000}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1150.981087][ T9943] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 14:58:02 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0x700320, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:58:02 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/18, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf00}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1151.055169][ T9943] device bond331 entered promiscuous mode [ 1151.087184][ T9943] 8021q: adding VLAN 0 to HW filter on device bond331 14:58:02 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/18, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf00}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:58:02 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0x60000000}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:58:02 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x3, 0x2) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000780)={@remote, @empty, 0x0}, &(0x7f00000007c0)=0xc) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000140)=[{r3}], 0x1, 0x200) bpf$MAP_CREATE(0x0, &(0x7f0000000800)={0x685653841b84e5fb, 0x5, 0x7, 0xefd, 0x32a, r1, 0x7, [], r2, r3, 0x3, 0x3}, 0x3c) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0xffffffffffffff56, &(0x7f0000000040)=[{&(0x7f0000000100)="2e00000035000010000b400a000400030082c1b0acea8b0900018004021700d1bd", 0x14f}], 0x1}, 0x20000018) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="7e0000000200000000000000b2a4a46c6597939288531767d25d89e6d59636ad64ebfd04a03d8f80d1b5d1822a8ee489226f6bd652d2da873d9705f6ca66da14c9baabebe62619e3d29aeb409b6a3e48dfafdfbfa84f13213a1d2b2ce6583e67021ec0e005ef86cd35882c110d1a73fbe2c2753a8e4e3c7af13bb96cf6834347eefd477b077d00d5efe66b34dc337c833326815642e21c33f278d7c571b62722b5032691b316f43f2e325e8873f9942373b9fe85ce0bd835bf0f18b806aad3e248d36ba814d6cf3882984e0eb47f6b0d0381f7a16fe70579ec18260270742380896a"]) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00') [ 1151.472594][ T9961] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1151.588729][ T9961] device bond332 entered promiscuous mode [ 1151.610020][ T9961] 8021q: adding VLAN 0 to HW filter on device bond332 14:58:03 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x81, 0x1, 0x3f, 0x0, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0x100011, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:58:03 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/19, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf00}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:58:03 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0x65580000}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1151.841877][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 1151.841899][ T26] audit: type=1804 audit(1573657083.220:918): pid=9974 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir923645982/syzkaller.aWZZDI/786/file0" dev="sda1" ino=16898 res=1 [ 1151.979948][ T26] audit: type=1804 audit(1573657083.290:919): pid=9973 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir923645982/syzkaller.aWZZDI/786/file0" dev="sda1" ino=16898 res=1 [ 1152.060617][ T9988] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 14:58:03 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/19, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf00}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1152.103384][ T9988] device bond333 entered promiscuous mode [ 1152.163516][ T9988] 8021q: adding VLAN 0 to HW filter on device bond333 [ 1152.337541][ T26] audit: type=1804 audit(1573657083.720:920): pid=9958 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir400658008/syzkaller.KycbHe/1455/file0/file0" dev="sda1" ino=16610 res=1 14:58:03 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, 0x0, 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x11, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:58:03 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="2e0000003500050ad25a80648c6356c10224fc0010000b400a000400030082c1b0acea8b0900018004021700d1bd", 0x2e}], 0x1}, 0x0) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f00000000c0)=0x1, 0x1) r2 = request_key(&(0x7f00000012c0)='logon\x00', &(0x7f0000001300)={'syz', 0x3}, &(0x7f0000001340)='(#}\x00', 0xfffffffffffffffd) keyctl$instantiate_iov(0x14, r1, &(0x7f0000001380)=[{&(0x7f0000000140)="30556fda2d3466293ac03a0a7d64598331612f7d4d354b8deea932689ceecc2f7c2c9cb4f1774f3d006d512654d8fecb6abdd7171e1677dad592a0161cb39a3f20401a38f8a72480aa7bdb5eb98e4cce622ca7d9c227a4e75aa46acab0378fbb937755e0b09c1b55752a9894223412", 0x6f}, {&(0x7f00000002c0)="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", 0xffffffffffffff41}, {&(0x7f00000001c0)="b002742ac8ce3e995b56b2a8adedd35a44183471109197937a50ed95f1c9b1d4bea3dac8a132d62c7b96d6f6c878c32a7df6f6a764a3e8ba3fac20450e52f20dda8cb358b750abcfed74dd17e819ae48e70ce455a8fab54911c586489339c805d5764fd2be5c679958df85d081e2c763041dfb464e9ad70d1c3335069d543caf935ec514420b4f1b6f57c9ad5128c05b999c4ae4cc72f3b255d40036ae83c9c8eac09ef6430919f74a4f7b5e2987a4cfcc5e0b93122048d29c5b2cbe282632", 0xbf}], 0x3, r2) 14:58:03 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0x81000000}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1152.472250][ T26] audit: type=1800 audit(1573657083.750:921): pid=9958 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="file0" dev="sda1" ino=16610 res=0 [ 1152.477450][T10012] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1152.531270][T10013] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1152.578959][T10013] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1152.593659][T10012] device bond334 entered promiscuous mode [ 1152.631279][T10012] 8021q: adding VLAN 0 to HW filter on device bond334 [ 1152.639796][ T26] audit: type=1804 audit(1573657083.750:922): pid=9992 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir400658008/syzkaller.KycbHe/1455/file0/file0" dev="sda1" ino=16610 res=1 14:58:04 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0x700420, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:58:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/19, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf00}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:58:04 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="2e0000003500050ad25a80648c6356c10224fc0010000b400a000400030082c1b0acea8b0900018004021700d1bd", 0x2e}], 0x1}, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r2) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000180)=0x5) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000140)=[{r3}], 0x1, 0x200) ioctl$TIOCMBIC(r3, 0x5417, &(0x7f0000000080)=0x2) connect$llc(r1, &(0x7f0000000040)={0x1a, 0x308, 0xea, 0x6, 0x9, 0x7, @broadcast}, 0x10) 14:58:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0x88a8ffff}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1152.933933][T10030] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 14:58:04 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x81, 0x1, 0x3f, 0x0, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0x100011, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:58:04 executing program 3: socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r2, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0xf00}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1153.056633][T10035] device bond335 entered promiscuous mode [ 1153.074898][T10035] 8021q: adding VLAN 0 to HW filter on device bond335 [ 1153.105293][T10041] device bond335 left promiscuous mode 14:58:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0x9effffff}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1153.308160][T10049] device bond20 entered promiscuous mode [ 1153.347781][T10049] 8021q: adding VLAN 0 to HW filter on device bond20 14:58:04 executing program 3: socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r2, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0xf00}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1153.464252][T10056] device bond336 entered promiscuous mode [ 1153.495982][T10056] 8021q: adding VLAN 0 to HW filter on device bond336 [ 1153.597103][T10065] device bond336 left promiscuous mode [ 1153.599179][ T26] audit: type=1804 audit(1573657084.980:923): pid=10023 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir923645982/syzkaller.aWZZDI/787/file0" dev="sda1" ino=17345 res=1 [ 1153.710530][T10074] device bond21 entered promiscuous mode 14:58:05 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0xb25727b3}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1153.749112][ T26] audit: type=1800 audit(1573657085.020:924): pid=10023 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="file0" dev="sda1" ino=17345 res=0 [ 1153.770362][T10074] 8021q: adding VLAN 0 to HW filter on device bond21 [ 1153.862821][ T26] audit: type=1804 audit(1573657085.020:925): pid=10060 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir923645982/syzkaller.aWZZDI/787/file0" dev="sda1" ino=17345 res=1 14:58:05 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, 0x0, 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x12, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:58:05 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000680)={&(0x7f0000000040)=@sco={0x1f, {0x1, 0x64, 0x33, 0xd4, 0x3, 0x1f}}, 0x80, &(0x7f0000000600)=[{&(0x7f00000006c0)="21b7ced6e8226b770cdaebc59de4d7348830d9c90ead0cb7581b9f288d4707db3d3bafc4122907474a9bf2c455796582c94e7f95d175201bd071f9d4a5c63cfbd7038bb7730563b3c0fe856e3c8d3621b018a9094e514de9ee46c2e5843e2f84bdf04bcea24a7f6784d802b48f130b653cd487a7f29b90740dd199edcccf637ae83e74f802af700fb3b2d8cb6f7f88a37441b02435270000bcb3573dfd881f033d3c20f6b7a933680d42f62cfc10b7a11f27cd620d178784fc7055e0ad40c2b20eff5362675babeed4d8298f7d8092754fde1d65", 0xd4}, {&(0x7f0000000200)="bc8c4bcbba0bf5bf6c44bc219e01e1034886a974df5146b802c1d4194507e5381c43affc9b242db567f0973da925a52617550def3f0c5b91aa4b7a3381945bdbcc8e590b65a005838b1fc82f46eda4be71b6e2d71ff0178e005b5d36982670dfdd5a0a2f4dfb5e2837aafd81c2", 0x6d}, {&(0x7f00000002c0)="d74222e4d9ed9c67d9c81fa6b79385296f4ce43c47c50f379173d216dd1dd43f2e77db4417c81054166c6d3ac440a57a9713cd8fdd6beb1e41fcc6a17dd2e5deec5b", 0x42}, {&(0x7f0000000340)="6ee9f8c7cb61e7c812dd61fe0e0b66ebad70a9cb6be9733c7f498e3d91f588e6565806a42143ec6fe8d569443313bf0fa76efbf70f3bf5a1a3a1ae18b14f15b7ce80355e754093143365cd07e43ba846283f98557a9fa843d010c8ccfa8cb519ef6f9e727604819469420bf20ec49ede77f347363ff1", 0x76}, {&(0x7f00000003c0)="96a5d77e0e71c2ba8fbde0fd057ec07f5c362d96d0c6fc39e320aa5af42c200e192009125db40e1add20b851a0b49998fcbe7f34d5aca399c231d449adb590e06c5607ce2fbb74ea26c47a6f6780fc48d34bb0310da268551f99f7c8093682bb5ee9c2a356867522f49a0a084f38344e3feb2570d0fdbfe575bdeec2a7db82d9c9de54aa2ae2db5b8e9575cf5fd01186b35c8cbdb57a0814e790ffc05d829f96e9c58369851741d6720e8ea3a0", 0xad}, {&(0x7f00000000c0)="48f69af4ea11270ee39f0e7f5e7e9b34fbfe708c7eaf", 0x16}, {&(0x7f0000000480)="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", 0xfd}, {&(0x7f0000000580)="fa0b7bba23bf41ae92123d1b5b1a9df23ee3261b755d5a146172535af92ff7853b12d3411657fc2ea5793c2190e89d5f3038b7ea67379bdb5bf30c3dce29cf0418cf11e3a3dda2cc50c09e19a245418efe17431201a387fa2b84c874ddcf8d888d07ac", 0x63}], 0x8}, 0x88000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000016c0)={0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r2) getresuid(&(0x7f00000001c0), &(0x7f00000007c0), &(0x7f0000000800)=0x0) mount$bpf(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='bpf\x00', 0x1082004, &(0x7f0000000840)={[{@mode={'mode', 0x3d, 0x7}}], [{@obj_type={'obj_type'}}, {@audit='audit'}, {@subj_user={'subj_user', 0x3d, 'vmnet1&md5sumcpuset#'}}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@euid_eq={'euid', 0x3d, r2}}, {@audit='audit'}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@euid_eq={'euid', 0x3d, r3}}, {@subj_user={'subj_user', 0x3d, ',cpuset.cpuset$/em0!wlan1cpuset-selinux'}}]}) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="2e0000003500050ad25a80648c6356c10224fc0010000b400a000400030082c1b0acea8b0900018004021700d1bd", 0x2e}], 0x1}, 0x0) 14:58:05 executing program 3: socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r2, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0xf00}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1153.955796][ T26] audit: type=1804 audit(1573657085.300:926): pid=10048 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir400658008/syzkaller.KycbHe/1456/file0/file0" dev="loop0" ino=790 res=1 [ 1154.024529][T10083] device bond337 entered promiscuous mode [ 1154.062902][T10083] 8021q: adding VLAN 0 to HW filter on device bond337 [ 1154.158515][T10087] device bond337 left promiscuous mode 14:58:05 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0x800020, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:58:05 executing program 4: r0 = socket$kcm(0x10, 0x1, 0x10) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0xffffffffffffff96, &(0x7f00000001c0)=[{&(0x7f0000000040)="41a0fe90d5ce4cf9c8dcbda5942197a6639ff38b716001cadb806c093364272e56d744aa5436bc63037b0c41b8de376b260792f3131263a05b31db8ec2de52f1cc18e1aaea62c71ade"}, {&(0x7f00000000c0)="daa412589c7e55961ca228668665f43e7c3ac216180039a914182c132a97cb881a8d9a9a0286e133f023bfd9407ff259ff95131cc14207694b850f3b5cbe6d1331f00e09e84ec6e7a4e48748c3f575faab7018ca58cd392c154424a64bc91df468b63b6e0e6b426b167d76e5f00e2fbf35ac8f653c5cc9bdbbf293291e27daa36a3c89d35130a351c1cb5ffe5316032f1481782950cafebf5bc34e395a45b0f99727dc25d53ae10206758e5eb47689b08e35842775b395ab9069d68fc403bd17ed23313fec48c7455aff51dce83f"}, {&(0x7f0000000580)="ad59a68ba5ecafdbb4a91eb389ca29f8416864ce021d24afd46ca29ac4b50c38e6504ff8035eab386dafd3766cc4260630f80c6fa76a0bd6b82f270e0eebfec291515928e135a06c49897d32a51b96af4acf496fcf08e19e33ca0699f01c5e373015a1a8ed59c7156e742ac5d0babbd27bc65b1a10f5ada9b30eb28d5080f91f9634ce1319bd48765ae3f88ee56b30f9ce398367b964018064184c10aff3fc0de7c901397c609955e39b41232e943022bc9f1375eb3b431028c6765a332e634a6abdac0d"}, {&(0x7f0000000680)="f5f5626e4e13ea47ede2bf19f5880b8d96deadd4428b375a122807054303023012d7c032943bdb71855e3adeccc71c1ca5e115ba7c28f2a40b68d686fc6a013762727bfb7c09065d5a813184c9f4a06445aa8015f1954dc9807f87f411af44f41bdb7e8602df5e5532bdf8cb01f5ed6d9cb331136771038314c97a39ac6e383fd923b1f703ccb3801f5937b4f81c6da7006e1364fd9faf4efad7782621b47a5d175b96ce81a631d43d6e9b3ca83ae06dd9790fcf5ba05e7d99256c9273fcbbdf0f71ceec63e81f5a9e31eed04d69b0d9ea9ec1695e8224e86abbe45183a062791aad78"}, {&(0x7f0000000780)="380d89a781cb881ab051bd15bddcc0158894c536d960557d5486c920642334c74760535973a5fad4deaec87d3e2664c30e96b705ad17e62eb520d1bb84f99e5f7f9f114d971671866f19ad88bcb141c4fa101e14c4763a9685d70e380a33e257cc5ce1943c28b6a0bbc202c170ce117f391aded2ab824fc7b4fc2894e4db5aa28fe4f05ca45d2ff2b24b6aa93a33fd8c8fed8bb6e46d7e97a17dd77342f5172588f0a64509668273b3933f2bff99378358782e79ffc359e5cb485baa8cc7edc8c9a790623b46283ed9293283fd309337b26aba8dbe943f07e619db"}], 0x4, 0x0, 0xfffffffffffffd3f}, 0x240100a5) [ 1154.282076][T10098] device bond22 entered promiscuous mode 14:58:05 executing program 4: socket$kcm(0x10, 0x0, 0x10) r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x2, 0x200000) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x281, &(0x7f00000005c0)=[{&(0x7f0000000080)="10ba17c79e404920c083b1b76530bfe2fcc626fd9deca10b5a554bdad568266692fca10df862e8613223c4232bdbce6ed8fe144cc594b0349bb4465eed2ebf1e09ca94597dcc05d183aa1605ba267ba33de0b2fa5ffdc9b8fa4a11f3dcbf7e5d3a91492617574d"}, {&(0x7f0000000100)="f405b00a0010f28ce527b359c08a2c7582cd0c9cb4f63ea3db2e28ccdd4b721de0b549379ca9aecf053a24a383331f2a0a8b36"}, {&(0x7f0000000140)="bec813abaa6026089be9985c42b234b763d578ded9dbf165994fbb3ecf009b230bf96a807c1e05f02d2a3a6f08c336da930f5e98e55874f16f9107f3c915d44f30b85fc349420cb534c44ae3fd2cec70e19fe53408a5d7eb4422dddab9268af5696aba54a61e7db7b6fca2b565f9e32cae710e703a433b1dff6f4b2ef58b9583f1937e2baab5d3d0c07a27065fce0686e6310d"}, {&(0x7f0000000200)="d36fd04bd14ce0dc1d9369e81c2810"}, {&(0x7f00000002c0)="b973c27f69211016eb66ab2895a683a58c46add8768938fbdc57be85a5e24c916cf672a5d7b71a20ec1e82a6cb74863fa8b89d9d3fe3078c9fdf179b0b20d8582baa4cf60f02"}, {&(0x7f0000000340)="2f4a21378e4e51ff055c0c18aaee82b4e36e1f0126fd7e3ae8fd68ff6885b518fdc5e05c655876e7f08965e1c51b1c5a73456c6ace90069d6e1af94bb22a438b543cbbea70a7fdb15858e3f7bfc27908e5be85c174fc4e23fc0af7fb8db47a0ebd244e6804ea9ac89d64983635712f970f5eecab50dd847e335eb9cc09e20e"}, {&(0x7f00000003c0)="47e79a90c8e2b5367a88576d98ed15679697c203f23a5477f6a4c2976577f8f86fb4be861e00f600110ef47798e273b8e73e75a2a59095471b16c0bdf38887b5db504a9d45204f73982dce8821d1022d4969dec644293dfd1309366c34c102545b7247eda7e6b8d1480efe1ead1c8e2b7b08b4d6b8636ddbc8"}, {&(0x7f0000000440)="df8ab42bdd30bc55730c72093a24cf21bca41388c8ed3d60d2fc150b17323086abffb3205c7c03a0f7b3115c6175975bff72a68c70cd34e6f698d5cacc265a8337f850f5435f5df8476fce7f37e03f4b7b5f"}, {&(0x7f00000004c0)="c98fa3cb00d8740cb1a48e6c54c7af20f1a6302a210618ea522651e2177caf94fbeea50082cf92b4e1cbc7c2c2232eb6607099f8098748b10fb45fdfff3145f665ec8abdf31d243f3dbf3201a84cad4def0cb372834147410c7911c71dd7bc41b2c173bae34bd9fd3dfa645837c8a8c18d1660e6c76d700141a1b5265d43dc5bface015441c304d99111fb3792df72688da4fcc5b3746cf39e9eb95dc8402efe114517ad220dbe3016158404de2a7dd08adc24a60434b9bba596a1bbc7a7dd3b19ff030fe6cff1725b34e50c234f3c"}]}, 0x0) [ 1154.357557][T10098] 8021q: adding VLAN 0 to HW filter on device bond22 14:58:05 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x81, 0x1, 0x3f, 0x0, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0x100011, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:58:05 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 14:58:05 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0xb32757b2}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1154.673865][T10120] validate_nla: 7 callbacks suppressed [ 1154.673877][T10120] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1154.769337][T10120] device bond338 entered promiscuous mode [ 1154.816429][T10120] 8021q: adding VLAN 0 to HW filter on device bond338 [ 1154.853710][T10127] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 14:58:06 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="2e0000003500050ad25a80648c6356c10224fc0010000b400a000400030082c1b0acea8b0900018004021700d1bd", 0x2e}], 0x100000000000024a}, 0x44044) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r1) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/vsock\x00', 0x830000, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000001a80), &(0x7f0000001ac0)=0xffffffffffffff62) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000040)={r0}) [ 1154.997782][T10127] device bond23 entered promiscuous mode [ 1155.097664][ T26] audit: type=1804 audit(1573657086.480:927): pid=10096 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir923645982/syzkaller.aWZZDI/788/file0" dev="sda1" ino=17335 res=1 [ 1155.098130][T10127] 8021q: adding VLAN 0 to HW filter on device bond23 14:58:06 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="2e0000003500050ad25a80648c6356c10224fc0010000b400a000400030082c1b0acea8b0900018004021700d1bd", 0x2e}], 0x1}, 0x0) fcntl$getown(r0, 0x9) [ 1155.248754][T10123] device bond338 left promiscuous mode 14:58:06 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 14:58:06 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, 0x0, 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x13, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1155.424935][T10157] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 14:58:06 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0xc3ffffff}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1155.490568][T10163] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1155.499846][T10157] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1155.562458][T10163] device bond24 entered promiscuous mode 14:58:07 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x7, 0x800) ioctl$KVM_GET_XSAVE(r1, 0x9000aea4, &(0x7f00000002c0)) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="2e0000003500050ad25a80648c6356c10224fc0010000b400a000400030082c1b0acea8b0900018004021700d1bd", 0x2e}], 0x1}, 0x0) [ 1155.604908][T10163] 8021q: adding VLAN 0 to HW filter on device bond24 [ 1155.631342][T10169] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 14:58:07 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0x800120, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:58:07 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) [ 1155.686596][T10169] device bond339 entered promiscuous mode [ 1155.718238][T10169] 8021q: adding VLAN 0 to HW filter on device bond339 14:58:07 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x81, 0x1, 0x3f, 0x0, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0x100011, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1155.811345][T10179] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1155.819708][T10173] device bond339 left promiscuous mode [ 1155.857122][T10178] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 14:58:07 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="2e0000003500050ad25a80648c6356c10224fc0010000b400a000400030082c1b0acea8b0900018004021700d1bd", 0x2e}], 0x1}, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) recvfrom$rxrpc(r1, &(0x7f0000000140)=""/149, 0x95, 0x20, &(0x7f0000000080)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x24) [ 1155.938739][T10178] device bond25 entered promiscuous mode [ 1156.060942][T10178] 8021q: adding VLAN 0 to HW filter on device bond25 [ 1156.132325][T10195] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 14:58:07 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0xf0ffffff}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:58:07 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) [ 1156.185668][T10195] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 14:58:07 executing program 4: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/mixer\x00', 0x10000, 0x0) ioctl$VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x3) r1 = socket$kcm(0x10, 0x2, 0x10) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f0000000040)='\x00') sendmsg(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="8347b6e5589092fd5f56c3e6239e46249fd1c3b87b972b89692cca44ec7d4f77d490db1cc60a3ec19ef40946547c28530fc1283420512889efc97376c1338f130a0cc7658e98df54a7d736846c6ad8ee60a156c0e6f417623a5703", 0x5b}, {&(0x7f0000000140)="712f71a74754fbc9f7d45e8ed2a5b6ffb0cccb36403f6a0f5cd65d361e0f21a01a6aad5dd40457802b45fef967ebd17ff637379bebb784bfddd707949b251d83cbcb7350ccc65f68d84d69d69ae240dc2624f6af77502c3f7e842638470de08f3f625addecae894af38ee3f43e364c7823e402f60219a78e9c770054b6afde514c257de9484e4e20ec43990b6b047fceda0231f64aaedf5f764e757a177316bb08bb2b795039aac4dbc9a13b10ef0681267b913a59524c0f748c90d10a70fe96c3c1febaef0ec775552e9b0e8f35ba9b4535dea18128d44fa440f64ac45ed3ad6a45e2e36de9bad25f1507fa833aa7b8", 0xf0}], 0x2, &(0x7f00000002c0)=[{0xe8, 0x117, 0x5, "40744c65841facbe1700e1cb7d76b2d2a06e3f4278bffc84e8c92258678a63e6bca32e485be7868045ffbb45bd891d075f1e40fc1ddee608a51f1178e724d49e8419baa20a03e4263ed7349063d024f6d3e3657afba38d32447d56f22dcb9c3e408d61d4bb80a6f18cdf8f4855bbd8e53c3e02a65dbcfcba8edeb75f7ea3bb06310f93c3580e041456eade392681afc448a0bc869b519ffded918f7c4d35b15f7ef16cb2202ddb22a0c118882bded42965c28367cf5f27bd83ef155661bc56ebf91aa5e8c9658b859b29e2d037c10dab5c"}, {0xa8, 0xea9af0e54db6819a, 0x9, "197b4e0b829c29b929b77f6acb8fc9a51593407a166693dd0095047457a83ee22f9a4d3cc4ad13edd196a2321b35842fa2b0cdf5dfba700455e26539ae2b6b34a941f6bf1ebeb616099b194af307e3f65c94a93a39cb81571d0fbaa09628443586fc94c992ae540629a64b973dff6620be5b590beff2a902ac5aa50c32ef96cbbbd35d34c45495eba2eae12e0d742b51bc9d"}], 0x190}, 0x10) sendmsg$kcm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="2e0000003500050ad25a80648c6356c10224fc0010000b400a000400030082c1b0acea8b0900018004021700d1bd", 0x2e}], 0x1}, 0x0) [ 1156.485524][T10204] device bond340 entered promiscuous mode [ 1156.499363][T10204] 8021q: adding VLAN 0 to HW filter on device bond340 14:58:07 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000280), 0x0) [ 1156.563104][T10212] device bond26 entered promiscuous mode [ 1156.578003][T10212] 8021q: adding VLAN 0 to HW filter on device bond26 [ 1156.591903][T10218] device bond340 left promiscuous mode 14:58:08 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 14:58:08 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, 0x0, 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x14, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:58:08 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0xfcffffff}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:58:08 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="2e0000003500050ad25a80648c6356c10224fc0010000b400a000400030082c1b0acea8b0900018004021700d1bd", 0x2e}], 0x1}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000140)=[{r2}], 0x1, 0x200) ioctl$TCSBRKP(r2, 0x5425, 0x1f) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="d647cde2a33a56fb8c38713d8aeac068a52d2ac559d18c78bd89ad9d4a4c5d2dca4e2690719e9d847fcdda5d9f5bb073665fc941de3e1f2c0757351f21be5651ceae383271df1d3f8a54beeb", 0x4c}, {&(0x7f0000000140)="2ae9ef4290c21400ac20cb8ca37c6ebf44f12cae035a06423977b15a63f495b88ac3ed9a9847da", 0x27}, {&(0x7f0000000180)="7ce8a310633b8af97572f63e4c2f09363b81fb3833c30431ef1d0d4a5207909bcd575476c8af6a71a5eefe6c0d7d8e73cb7306cd55e826d3ab5065dcb5b4a35ae524889916257205e516e1f8efc393390647d9764b3ac435212387f12132178fc0925311cede1a3893cda72c8664b2f0b84846662b861e62e2b34897a882621021012ed3104fc1310bdd279557874962200b9b60a2be67dab5ff2c6147f55c2d9ccb349699efd4bf900c63ecdb8051c05d4633399ceb5b1a5cdea2dda64ffc0370398c7dcc37d2132777526dbc124992cadb9dee81e614d4bdc38f932e360939a4faa6b48e30adc612d113c78322ab0871f05b", 0xf3}], 0x98, &(0x7f0000000300)="4a955ab39573819045fa4e841d1e4c37f48e7c633d5d6d809b09e27b8011f93ffe501db0d86ee77d46fbe995e809ca65364d24a23ded02d4867b88c759ccab14a420d05932164e744d928a2a1dd7f00171c6b2335b394a5edd93b0a5e0b625e0129b0e5b177fec575cccb59be09ff2865b732089a8af7c8b227fb23b56bd2983276b826373e75ac1e6b40ddd320915684c6f57de995346c3574f602fcdc5d1351dcd4743ce2131704f3f7978f01c33c079e8bffc8ad9529c33dea2962f8a93", 0xfd6f, 0x20040008}, 0x44) listen(r0, 0xfffffff8) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r1, 0x3) [ 1156.903180][T10231] device bond27 entered promiscuous mode [ 1156.948317][T10231] 8021q: adding VLAN 0 to HW filter on device bond27 [ 1156.980344][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 1156.980360][ T26] audit: type=1804 audit(1573657088.360:934): pid=10199 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir400658008/syzkaller.KycbHe/1458/file0/file0" dev="sda1" ino=17153 res=1 [ 1157.079400][T10236] device bond341 entered promiscuous mode [ 1157.095609][ T26] audit: type=1800 audit(1573657088.360:935): pid=10199 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="file0" dev="sda1" ino=17153 res=0 [ 1157.108066][T10236] 8021q: adding VLAN 0 to HW filter on device bond341 [ 1157.146279][T10246] device bond341 left promiscuous mode [ 1157.180189][ T26] audit: type=1804 audit(1573657088.360:936): pid=10237 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir400658008/syzkaller.KycbHe/1458/file0/file0" dev="sda1" ino=17153 res=1 14:58:08 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0x800220, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:58:08 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 14:58:08 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x81, 0x1, 0x3f, 0x0, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0x100011, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:58:08 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0xfeffffff}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1157.409283][T10258] device bond28 entered promiscuous mode [ 1157.454806][T10258] 8021q: adding VLAN 0 to HW filter on device bond28 [ 1157.566099][T10270] device bond342 entered promiscuous mode [ 1157.593792][T10270] 8021q: adding VLAN 0 to HW filter on device bond342 14:58:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 14:58:09 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000140)=[{r2}], 0x1, 0x200) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000240)={@loopback, @local, 0x0}, &(0x7f00000003c0)=0xc) connect$can_bcm(r2, &(0x7f0000000400)={0x1d, r3}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r5 = socket(0x400000000000010, 0x802, 0x0) write(r5, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) ioctl$SIOCX25SDTEFACILITIES(r1, 0x89eb, &(0x7f0000000440)={0x101, 0x101, 0x3, 0x5, 0x5, 0xb, 0xc, "eca67752c74d4bc866dd52c11d080465f3e54bb7", "62b3cb4043cffeb8b06b5891ebd58767bc5ccc03"}) setsockopt$sock_linger(r4, 0x1, 0x2f, &(0x7f0000000100), 0x8) r6 = socket$kcm(0x10, 0x2, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000140)=[{r7}], 0x1, 0x200) syz_mount_image$exfat(&(0x7f00000001c0)='exfat\x00', &(0x7f0000000200)='./file0\x00', 0x101, 0x0, &(0x7f0000000240), 0x2000, &(0x7f00000002c0)={[{@iocharset={'iocharset', 0x3d, 'cp775'}}, {@namecase='namecase=1'}, {@utf8='utf8'}, {@umask={'umask', 0x3d, 0x4}}, {@dmask={'dmask', 0x3d, 0x1000}}, {@uid={'uid', 0x3d, 0xee01}}, {@errors_remount='errors=remount-ro'}, {@fmask={'fmask', 0x3d, 0x7}}], [{@appraise='appraise'}, {@smackfshat={'smackfshat', 0x3d, '-:md5sum,nodev'}}, {@hash='hash'}, {@permit_directio='permit_directio'}]}) sendmsg$can_j1939(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)="7183ad986e9d18833dada9217378dab9ab0e28650880e91291e1816f7b491f8640e2ba0e1da157b7a2ccd2a4eb9777d970f4b9c0cce12ae4bbc8569da932ef301b77e28be39e212615787ba2171d59c6c20789d47a2432543bed288348d95286170e9fea13286a862d671248372d17a57923cca8cebded3c46a2a2ed8a2811eac2280bba921adca3a0d1f3281d036ce749c533", 0x93}, 0x1, 0x0, 0x0, 0x90}, 0x4) sendmsg$kcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="2e0000003500050ad25a80648c6356c10224fc0010000b400a000400030082c1b0acea8b0900018004021700d1bd", 0x2e}], 0x1}, 0x0) r8 = inotify_init() ioctl$void(r8, 0x5451) [ 1157.668711][T10271] device bond342 left promiscuous mode [ 1157.861723][ T26] audit: type=1804 audit(1573657089.240:937): pid=10247 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir923645982/syzkaller.aWZZDI/790/file0" dev="sda1" ino=17335 res=1 [ 1157.917632][T10292] device bond29 entered promiscuous mode [ 1157.930303][T10292] 8021q: adding VLAN 0 to HW filter on device bond29 [ 1157.942675][ T26] audit: type=1800 audit(1573657089.240:938): pid=10247 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="file0" dev="sda1" ino=17335 res=0 [ 1158.054469][ T26] audit: type=1804 audit(1573657089.240:939): pid=10281 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir923645982/syzkaller.aWZZDI/790/file0" dev="sda1" ino=17335 res=1 14:58:09 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0xffffa888}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:58:09 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, 0x0, 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x15, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:58:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 14:58:09 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x81, 0x1, 0x3f, 0x0, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0x100011, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1158.388041][T10311] device bond343 entered promiscuous mode [ 1158.407640][T10311] 8021q: adding VLAN 0 to HW filter on device bond343 [ 1158.474270][T10317] device bond30 entered promiscuous mode [ 1158.488345][ T26] audit: type=1804 audit(1573657089.870:940): pid=10312 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir400658008/syzkaller.KycbHe/1459/file0/file0" dev="sda1" ino=17352 res=1 [ 1158.532145][T10317] 8021q: adding VLAN 0 to HW filter on device bond30 [ 1158.548962][ T26] audit: type=1800 audit(1573657089.900:941): pid=10312 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="file0" dev="sda1" ino=17352 res=0 [ 1158.604344][ T26] audit: type=1804 audit(1573657089.900:942): pid=10275 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir400658008/syzkaller.KycbHe/1459/file0/file0" dev="sda1" ino=17352 res=1 14:58:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 14:58:10 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0xffffff7f}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:58:10 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0x800320, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:58:10 executing program 4: r0 = socket$kcm(0x10, 0x5, 0x10) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="2e0000003500050ad25a80648c6356c10224fc0010000b400a000400030082c1b0acea8b0900018004021700d1bd", 0x2e}], 0x1}, 0x0) [ 1159.029481][T10340] device bond344 entered promiscuous mode 14:58:10 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="2e0000003500050ad25a80648c6356c10224fc0010000b400a000400030082c1b0acea8b0900018004021700d1bd", 0x2e}], 0x1}, 0x0) [ 1159.175212][T10340] 8021q: adding VLAN 0 to HW filter on device bond344 [ 1159.253143][T10348] device bond344 left promiscuous mode [ 1159.291617][ T26] audit: type=1804 audit(1573657090.670:943): pid=10355 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir923645982/syzkaller.aWZZDI/791/file0" dev="sda1" ino=16930 res=1 [ 1159.359086][T10347] device bond31 entered promiscuous mode [ 1159.382904][T10347] 8021q: adding VLAN 0 to HW filter on device bond31 14:58:10 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000880)={r3, 0x1c, "f8c36c79fe2a279a6b438a38333276d77dc9c5b5e9f99f4a93232b39"}, &(0x7f0000000900)=0x24) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000000)={r3}, 0x8) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="2e0000003500050ad25a80648c6356c10224fc0010000b400a000400030082c1b0acea8b0900018004021700d1bd", 0xffffffffffffff02}], 0x10000000000002a4, 0x0, 0xfffffffffffffe29}, 0x1) 14:58:10 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0xffffff9e}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:58:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf00}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:58:11 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, 0x0, 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x30, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:58:11 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x81, 0x1, 0x3f, 0x0, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0x100011, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1159.751166][T10379] validate_nla: 16 callbacks suppressed [ 1159.751178][T10379] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 14:58:11 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0xffffffffffffff51}, 0x25c950daf5e7f6d9) pipe2(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_LOCK(r2, 0xb) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x3000)=nil, 0x1000) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000000040)=""/148) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r3) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r4) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r5) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f00000005c0)={0x0, r5, 0x7f, 0xfde, 0x100000001, 0x1000}) ioctl$EVIOCGID(r4, 0x80084502, &(0x7f0000000100)=""/27) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2842, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r8, 0x2, &(0x7f0000002600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0}, &(0x7f0000000200)={0x7, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0xffffff81}]) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000140)=[{r10}], 0x1, 0x200) write$binfmt_misc(r10, &(0x7f0000000600)={'syz1', "4247fafe5da098eb9223755b85c20fa2a2b4c9af02ae6899205cbc8867c9d56d170cf0f057888bf72e0f06d672ee325f8b3f2b9e69380c3a46e7997026be9bc833928f6eb00f455ce4d8723334ac82f5ff81d0af613bcedf58565d7b81c8b21fabd9b12a4b3fd0a848cce3ea5e8948a56ff8f200"}, 0x78) poll(&(0x7f0000000140)=[{r9}], 0x1, 0x200) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r11) pipe(&(0x7f0000000580)={0xffffffffffffffff}) close(r12) io_submit(r8, 0x3, &(0x7f00000004c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x8, 0x2, r9, &(0x7f00000001c0)="b63b5e41bababb37536500582d45f570bf3e1e6d95c69b85411e03ab9506e0ab94b5faa1a2b2bb0fffda3178d4e5e3e60274f21c7deb472437bd99091eee5d30a8cf32190690267867f78ec9b4ee642db68f7bf55aa004183cec75983b922b15e96fc7333c9d1a917ed1bb9e3f004afaf8da2ccb4693dbc574f397627592662143893aef84f7d5d77de5c5bd7fd37066a16120d23c", 0x95, 0x1, 0x0, 0x0, r11}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x3, 0x2c, r0, &(0x7f00000002c0)="ff2eb4fc66e0082f757e9be3462d14333cfefb5c7e4f136aedeaae90936fc6b72990533a8c23001916ce32a767c57e1be5c1af2716e06dfd5bdfc54a1911109f16195fc4ea4d11de4cf7abc276c2897f0d3bb0d66897cdd0152161281ca681fd21b4094af640a80d1afea7eea8d244c2d071334da9c12ae00800fbecbb29a98772750c433ae32d0435ba7f7eb24db4d534523eee097a6d3770695d2bb58d06568ddb1c3beddeeedf11f1885d9481f7776b5b1a3ffa9d4a2b4e4a7be5e5b5c2601ea4430e9e08630e1264ef28f6826d692d07d3a995fd76d359c7aca8828fd1a5504b64e5faa07988af", 0xe9, 0x57d, 0x0, 0x1, r12}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x5, r6, &(0x7f0000000400)="60288c1cc94a486d0ed3fed32bbbe14d540b782d623d09a7a256ff9dbac6e13aa08560f57a730745abfa6e4c9793037b19360c82e59fa59b2381ffb263231d80262db8c257be141d5731b5b1d7027949fdde0e7a4f257ff4cd7c807c5eb46ebfb52119d79b2de51d77b8a003275d2122f0fd901105", 0x75, 0x7, 0x0, 0x1}]) poll(&(0x7f0000000540)=[{r1, 0x8208}], 0x1, 0x200) r13 = dup3(r3, r6, 0x0) connect$rxrpc(r13, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e21, 0x7, @empty}}, 0x24) [ 1159.890106][T10379] device bond32 entered promiscuous mode [ 1159.917808][T10379] 8021q: adding VLAN 0 to HW filter on device bond32 [ 1159.952083][T10380] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 14:58:11 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf00}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1160.044103][T10380] device bond345 entered promiscuous mode [ 1160.091423][T10380] 8021q: adding VLAN 0 to HW filter on device bond345 [ 1160.154071][T10385] device bond345 left promiscuous mode [ 1160.180355][T10414] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1160.245887][T10414] device bond33 entered promiscuous mode [ 1160.279171][T10414] 8021q: adding VLAN 0 to HW filter on device bond33 14:58:11 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0xffffffc3}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:58:11 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf00}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:58:11 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0x800420, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1160.530491][T10423] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1160.620134][T10423] device bond346 entered promiscuous mode [ 1160.656226][T10423] 8021q: adding VLAN 0 to HW filter on device bond346 [ 1160.747148][T10427] device bond346 left promiscuous mode [ 1160.819948][T10433] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 14:58:12 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, 0x0, 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x50, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1160.874197][T10433] device bond34 entered promiscuous mode [ 1160.896242][T10433] 8021q: adding VLAN 0 to HW filter on device bond34 14:58:12 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x81, 0x1, 0x3f, 0x0, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0x100011, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:58:12 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0xfffffff0}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:58:12 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf00}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1161.272071][T10449] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1161.363195][T10449] device bond347 entered promiscuous mode [ 1161.410524][T10449] 8021q: adding VLAN 0 to HW filter on device bond347 [ 1161.436547][T10453] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 14:58:12 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="2e0000003500050ad25a80648c6356c10224fc0010000b400a000400030082c1b0acea8b0900018004021700d1bd", 0x2e}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000001840)='/proc/capi/capi20\x00', 0x400000, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000001880)='/dev/usbmon#\x00', 0x8, 0x404440) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000140)=[{r5}], 0x1, 0x200) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r6) r7 = gettid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000016c0)={0xffffffffffffffff}) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r9) r10 = socket$unix(0x1, 0x5, 0x0) bind$unix(r10, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r10, 0x0) r11 = socket$unix(0x1, 0x5, 0x0) connect(r11, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r12 = gettid() r13 = gettid() r14 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) lstat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$security_capability(r14, &(0x7f0000000140)='security.capability\x00', &(0x7f0000000680)=@v3={0x3000000, [{0x1, 0x1}, {0x4, 0x1ff}], r15}, 0x18, 0x2) r16 = getegid() sendmmsg$unix(r11, &(0x7f0000003f40)=[{&(0x7f0000000040)=@abs, 0x6e, 0x0, 0x0, &(0x7f00000001c0)=[@cred={{0x1c, 0x1, 0x2, {r13, r15, r16}}}, @cred={{0x1c, 0x1, 0x2, {r12}}}, @rights={{0x14, 0x600, 0x1, [r10]}}, @cred={{0x1c, 0x1, 0x2, {r13}}}], 0x78}], 0x1, 0x4004) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000140)=[{r17}], 0x1, 0x200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000140)=[{r18}], 0x1, 0x200) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r19) r20 = fcntl$getown(0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000016c0)={0xffffffffffffffff}) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r22) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000016c0)={0xffffffffffffffff}) getsockopt$sock_cred(r23, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r24) r25 = getegid() r26 = getpid() sched_setattr(r26, &(0x7f0000000040)={0x30}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000016c0)={0xffffffffffffffff}) getsockopt$sock_cred(r27, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r28) fstat(0xffffffffffffffff, &(0x7f0000003380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r30 = getpid() sched_setattr(r30, &(0x7f0000000040)={0x30}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003400)={{{@in6, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@loopback}}, &(0x7f0000003500)=0xe8) r32 = socket$unix(0x1, 0x5, 0x0) bind$unix(r32, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r32, 0x0) r33 = socket$unix(0x1, 0x5, 0x0) connect(r33, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r34 = gettid() r35 = gettid() r36 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) lstat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$security_capability(r36, &(0x7f0000000140)='security.capability\x00', &(0x7f0000000680)=@v3={0x3000000, [{0x1, 0x1}, {0x4, 0x1ff}], r37}, 0x18, 0x2) r38 = getegid() sendmmsg$unix(r33, &(0x7f0000003f40)=[{&(0x7f0000000040)=@abs, 0x6e, 0x0, 0x0, &(0x7f00000001c0)=[@cred={{0x1c, 0x1, 0x2, {r35, r37, r38}}}, @cred={{0x1c, 0x1, 0x2, {r34}}}, @rights={{0x14, 0x600, 0x1, [r32]}}, @cred={{0x1c, 0x1, 0x2, {r35}}}], 0x78}], 0x1, 0x4004) r39 = getpid() sched_setattr(r39, &(0x7f0000000040)={0x30}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000016c0)={0xffffffffffffffff}) getsockopt$sock_cred(r40, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r41) r42 = getgid() r43 = creat(&(0x7f00000037c0)='./file0\x00', 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000140)=[{r44}], 0x1, 0x200) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r45) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000140)=[{r46}], 0x1, 0x200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000140)=[{r47}], 0x1, 0x200) r48 = getpid() sched_setattr(r48, &(0x7f0000000040)={0x30}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000140)=[{r49}], 0x1, 0x200) getsockopt$inet6_IPV6_XFRM_POLICY(r49, 0x29, 0x23, &(0x7f0000004940)={{{@in, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@local}}, &(0x7f0000004a40)=0xe8) r51 = getgid() r52 = getpid() sched_setattr(r52, &(0x7f0000000040)={0x30}, 0x0) lstat(&(0x7f0000004a80)='./file0\x00', &(0x7f0000004ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r54 = getpid() sched_setattr(r54, &(0x7f0000000040)={0x30}, 0x0) r55 = getegid() r56 = syz_open_dev$loop(&(0x7f0000004b40)='/dev/loop#\x00', 0x81, 0x20880) r57 = getpid() sched_setattr(r57, &(0x7f0000000040)={0x30}, 0x0) r58 = getpgid(r57) stat(&(0x7f0000004b80)='./file0\x00', &(0x7f0000004bc0)={0x0, 0x0, 0x0, 0x0, 0x0}) r60 = socket$unix(0x1, 0x5, 0x0) bind$unix(r60, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r60, 0x0) r61 = socket$unix(0x1, 0x5, 0x0) connect(r61, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r62 = gettid() r63 = gettid() r64 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) lstat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$security_capability(r64, &(0x7f0000000140)='security.capability\x00', &(0x7f0000000680)=@v3={0x3000000, [{0x1, 0x1}, {0x4, 0x1ff}], r65}, 0x18, 0x2) r66 = getegid() sendmmsg$unix(r61, &(0x7f0000003f40)=[{&(0x7f0000000040)=@abs, 0x6e, 0x0, 0x0, &(0x7f00000001c0)=[@cred={{0x1c, 0x1, 0x2, {r63, r65, r66}}}, @cred={{0x1c, 0x1, 0x2, {r62}}}, @rights={{0x14, 0x600, 0x1, [r60]}}, @cred={{0x1c, 0x1, 0x2, {r63}}}], 0x78}], 0x1, 0x4004) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r67) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000140)=[{r68}], 0x1, 0x200) r69 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000006280)='/dev/hwrng\x00', 0x202000, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000140)=[{r70}], 0x1, 0x200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000140)=[{r71}], 0x1, 0x200) r72 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000062c0)='/dev/video2\x00', 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000140)=[{r73}], 0x1, 0x200) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r74) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000140)=[{r75}], 0x1, 0x200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000140)=[{r76}], 0x1, 0x200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000140)=[{r77}], 0x1, 0x200) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r78) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r79) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000140)=[{r80}], 0x1, 0x200) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r81) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r82) r83 = openat$kvm(0xffffffffffffff9c, &(0x7f00000064c0)='/dev/kvm\x00', 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000006500)={0x0, 0x0}) stat(&(0x7f0000006540)='./file0\x00', &(0x7f0000006580)={0x0, 0x0, 0x0, 0x0, 0x0}) r86 = socket$unix(0x1, 0x5, 0x0) bind$unix(r86, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r86, 0x0) r87 = socket$unix(0x1, 0x5, 0x0) connect(r87, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r88 = gettid() r89 = gettid() r90 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) lstat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$security_capability(r90, &(0x7f0000000140)='security.capability\x00', &(0x7f0000000680)=@v3={0x3000000, [{0x1, 0x1}, {0x4, 0x1ff}], r91}, 0x18, 0x2) r92 = getegid() sendmmsg$unix(r87, &(0x7f0000003f40)=[{&(0x7f0000000040)=@abs, 0x6e, 0x0, 0x0, &(0x7f00000001c0)=[@cred={{0x1c, 0x1, 0x2, {r89, r91, r92}}}, @cred={{0x1c, 0x1, 0x2, {r88}}}, @rights={{0x14, 0x600, 0x1, [r86]}}, @cred={{0x1c, 0x1, 0x2, {r89}}}], 0x78}], 0x1, 0x4004) r93 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000006600)='/proc/self/attr/current\x00', 0x2, 0x0) r94 = fanotify_init(0x0, 0x8000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000006640)={0x0}, &(0x7f0000006680)=0xc) getresuid(&(0x7f00000066c0), &(0x7f0000006700), &(0x7f0000006740)=0x0) r97 = socket$unix(0x1, 0x5, 0x0) bind$unix(r97, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r97, 0x0) r98 = socket$unix(0x1, 0x5, 0x0) connect(r98, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r99 = gettid() r100 = gettid() r101 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) lstat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$security_capability(r101, &(0x7f0000000140)='security.capability\x00', &(0x7f0000000680)=@v3={0x3000000, [{0x1, 0x1}, {0x4, 0x1ff}], r102}, 0x18, 0x2) r103 = getegid() sendmmsg$unix(r98, &(0x7f0000003f40)=[{&(0x7f0000000040)=@abs, 0x6e, 0x0, 0x0, &(0x7f00000001c0)=[@cred={{0x1c, 0x1, 0x2, {r100, r102, r103}}}, @cred={{0x1c, 0x1, 0x2, {r99}}}, @rights={{0x14, 0x600, 0x1, [r97]}}, @cred={{0x1c, 0x1, 0x2, {r100}}}], 0x78}], 0x1, 0x4004) r104 = getpid() sched_setattr(r104, &(0x7f0000000040)={0x30}, 0x0) r105 = getuid() getresgid(&(0x7f0000006780)=0x0, &(0x7f00000067c0), &(0x7f0000006800)) sendmmsg$unix(r1, &(0x7f0000007f80)=[{&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000140)="65b4c3a1469a3a62bc975d71f039b4c76015b1a2d7472f9ee029e3449fd242aedbb4895c78356948363c4eb64c297ebd6e740e7400a20b3a6d41914150fc2d1ffe9a85da8a82e659e929678a68e98f443851c99d25bbcc19bef9bb4889508c83eab7ed86464d2a1d736141cc6425f3a0526bd694f9903aa5a0987fc5ab5183cd6e256ca57b82c422f51f2dc3c8d27c67f11f627ebad464519662c36910889916e2aa8be8c01c928c318e781fcd76365aa73a9320b24e113c997f445d24e49ab56bedf182b89d595187293b8139", 0xcd}, {&(0x7f00000002c0)="51547e012a0dfb5b8ee00071c3a0af6e96fcc5127b5c8464f43d3052202d7c1cc71bc276b26b49588525d7f328b7c11652f418ac2e7291e327ce26f125b8d59448cb347fe3f27865fa0fda736c1c48e66a8c004ffb3c13e21665f0f5147bbc8685d1859b98d3f90d5b33ac595c60143f1ad59363404c043d2e9e2afa0f27038c6a1c2cd0fa468f6ade02ff6efdc9cd0fb5f15a4e286ae245032dbee50bb3b6bd25d5dfa8305a6b0159547e24f453650e2cb8", 0xb2}, {&(0x7f0000000380)="b13a9c22b5e908272ea3200ef54d7bf65018a9879f9ea0ba0d09c81998dc84e4fdd7a14ebb6773699f5051e69973862b8ae7a7ab5e65fd455a06bc99f9afd567ad4d6fdc316bd681993f20777a", 0x4d}, {&(0x7f00000000c0)="814c5bffefc35cdef5a7297c27c2950e1bfd53e419d72f80c976215dc95b5051a7faee9c00777739ba9ea2db63e4f50842daf968ca81", 0x36}, {&(0x7f0000000400)="eaf5c3d4ea182efe21f31ff6ad7f488334575cfbeae059941dc3a5cab7233f4f07a66fb2317048ed3c6c6dd2fb8d57244803d6043850f55e35c0989b436852501738e9971df000a0206308aaf3e4e785f568412dbd726b34a94b023c73efa7b1902e24669331965809c26fe7725eb74d629272af3258dd9aa3a23ea70bca4e7210d3833b2d39f659eca8deb3f63905544da2ba93cfd7fddda902d3", 0x9b}, {&(0x7f0000000240)="8949524219e2", 0x6}, {&(0x7f00000004c0)="b116969b0a03f1c4f6223b09d420b9d456a75a08ec2bc92339fb5828708da866a253ed075bf716270567ae45e4200c16faa4417b2db38c2e5b5c9849dfa57c6a", 0x40}], 0x7, 0x0, 0x0, 0xcc80}, {&(0x7f0000000580)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000001680)=[{&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000001600)="a73ccaaf2341fdd4017804bb62d14410a7f0e32fee5a83c633484f8ecb1426e89f88ef2452d9ce0122e0691635d263d82b8a57b442cbf6cdfc92beba1c045d8d3117774d887dac191fccb13078444055da1fa74e915bf9b46558b6e69e0ac3c8e9e0996328a0ec9efa62052aa6c195894a1c74d00af715cda08ddf", 0x7b}], 0x2}, {&(0x7f00000016c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000001800)=[{&(0x7f0000001740)="0338587bb1a921bfa0551815ab0c56162c8ff56073f0499ba00b0b334b386ae65eae56febd96bac95238c8f947f55048c7ebc70990ca38243005d3df31578536c0dc1c14a50f6ccd16919193012b087f8d7dd15bc2d6f0ec37d54d2df442b3e37f1b4712651117bdaf665bdc6e6f54dde26e3b9263956440e51fb5bf50f035377ae2edce11", 0x85}], 0x1, &(0x7f00000081c0)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r3, @ANYRES32, @ANYBLOB="20000000000000000100000001000000e7bfc88b6738d88aa1262bc35e3edfc5786055c8289760f863ef2f06dafe0538c981a79ebb470c49dcdba16a53318d", @ANYRES32=r4, @ANYRES32=r0, @ANYRES32=r5, @ANYRES32=r6], 0x58, 0x40800}, {&(0x7f0000001940)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000002c80)=[{&(0x7f00000019c0)="93037eff55641634a6d0b363ebefe482e1099d0d5c9a9bd5e3b231d48547df5faa1a2f58e896edfe54b850ec7eb844f937fd2318558a9c12cb758c5d65f6d670e7691350dfa1bcb963827e919b7c782a53298c22b7fe77dfc367a4b21cba12c8bcc6bafa914ef9f90a144a8fca9770392aa4e65f6931c70109b010bd39c148f2eab6b097f0d627fa8274505736e1bf321b554da4255d27329037ab5cc76a2f4bd5062607e749d580e04d7eb03a7ad771d577ab65", 0xb4}, {&(0x7f0000001a80)="b2eab08d2ec83d01533d354b8bc7e318c195dd", 0x13}, {&(0x7f0000001ac0)="56df0d337df21e19a76850069d51f6438265a7a062775ae15483c92daf17769360f53c3e408c774da28f728ad4766c53019927987e2f23a2a7b412c65b5f94e25dfea0edac5a32885f0f6240faf7fc5a698a35320a979125a934c691b631b9a514f31b047a020e8d906fcb5ada93aa26d437c8bfb071b44e54d07f0cc4c95d157676636b948f5225382be59a04faae6c73276bf07346f0b76641949ef6e6d2ec4659f70652edf22f05da69eb3329de469b035dd3", 0xb4}, {&(0x7f0000001b80)="04d4136846677b9391e7b007acbd1a583ca017eaeec168bcff7f2fb5c860d1dff8b3e7c147cde7bba180315ab82ad63b5efde30649346f84433a3828adf66b8e0eae74f1aee30f09ce951ef3d30c61322110ceac910de357d23ebc09e3dc13e3b1778c39ac079684597ecd4c4b750af0ced9428989e5c462cd8fa7ef4912125f0d9fa732f1c80ed03eec59047bc0bf8c172f915b714e94132531369620b409ea606f63f989f7bba311dde6e7edce31383a6c3b1d79de90321f443b8f143fac8b63dd12edfa1955788dc0f3e1bd70bf49a8aea0546ad69535dedf2b0967e994e5b73c6dd1b64d68e59e50f508748e80a28b523c2547d0cb6b1acba5031236abd6881d032f223b1fa8978a943a5bf61dd29ba1e7deddd3c5e18967579870bf0df9faf8597b6d6c52043977aa82df548389de6f93aa29eb800376b448ed207325678958f7ed1a93c33a1cb47462cc9355d5c0d5b07da1bea148ca178708a984a35109480a5021e2651a399271d75e30813840d8aa1d7057635eee89caa253727cf13aa45a22d70895fedda4007c67f478110c205292e27ef7d70d3f40973ac74b877030f0263892f2486a043f691412d22391c9c06a97dbeefe25778586496429138dbd3669cd9155239214817ad0a0b6fa2ef24f9cc17186a97a27e78c5fed9461f15cc167b0ca6b7792dd7f18b5c21b1c45c69eadccad49c24f298628120c1fa64cbf19cddb798971800ee7aa7d15443966f7e85e09b5e6467dcf5354ebccaa6c276b21f3a3a630da58ffcbc22c0012323125ddf47f681bbf7760e29af525453aef1f0432a10fbe6c4acfac4f400d65556d64c2e221447209d52011476749a45aaad33df6e51d5132307b1e33c5c3dce0f12033f9118a9e659969483938301079ec289af1ea571305de1fe382cd2aaedbee1daaa357478cd83915ccad72d38386c080120075f188c56d2b3313a39bfa6d983fdc82341beac586270e234627f5839a1e026c722d5f477cf2c3d1fc5355f8ecd047bf4e92f422b33903ca8ce2ffc39ad5244165d041c595d32b634c1f7aac9183b733b644de91a9c9749fcdbfac7c8ca9c028a587505ba0351074f644445a1388dd93ac6baba8b5bb9efbe92aa0a81679e5e3785f2e730670b011c4aa16521bc7c08bca38db0eba830932acc0e6c96f9ef79442e74dba106d68562976c8d08d2b444c026d7bd938efd2be85ebe4ee727094e41d41ed09946a5a6d3d851c40fb91b11bcaabffda9987138ff3d3bdd7d84b9ba066648ed7dc43eb278ebcb9eee97fd3c4dd6b5b89b9270d03f5f2923833e60bc5361a81a98dad789941c8a9435c70feb3be163a52dcf434dd9847ec04b5a28ffe649a352458f8ff6d54c760365c443b72c3d58b4ed04795174378448f9d47f31fc7e490d1c7b3b66bbf05f40ce4ec6807c05ca84f04d56b652b98a7ebdc81a9f0c5a98d4896e83388b2a0e23e454c135703938676d225bc59d82057d21849f1ab25018f3ebc37356f9ba025ce9a6615a754fe09a89aeefd10fe580c08afdc2f705635b06eeb399cbff5c7dd2b8f0e4cc3418caa9de396967b62481d1490a7f920c58cdefbe81f9a50d3ca254be55bce9e9a03876ad9e8bf4639e8f243ab1c8554c1fb8657da654a3f8f0506eefdb6401b0881230638bedee14cd3f6a80eedb275d39cd7a55865774d115b47ff9df5c82d0aa82457c99ef5dfe3e62253169a67e4d110496bcdfa28faa17527de25e89ca08803ffcf8da031379d64404c5ef73626cad6db6a6db4c96341f25333ad47ea4a6654bdcae79461283e438cb58cf6ecdef94822157b38e90e0025053f2ab903dd0baf6e1370a40b7ab0a7247d5d47b8858562db036996f6b8ac2e1844a26008403d19244377c001c2529b63bfa4bfa87b7796c39e7cc6514a2f79049d8b6710e5b534c65a385fd9697fa24469d45036f24b92e84ad3f30a8cbfa7a2309c6d3aa68c713494b7861a837a73723cc4cb3f46fdc9778edb89f983f04f3a0d0b6ca84f8d9d0a40dae498f60075ce758df44a8303563b3374a015075714a483d45339b4e24e750f952a23fc39f549ba6f31dae66ef8b2b8c2240b3265ff261de5c8b5318fd0eae3f3e0891ccd5e4c0029c188020516dbdb1378c7c0f4565329cc32bb1391255f94927bb7bf55d32a8719b80d2164e8fe4a785f2ea2f0e887e8258baaabf5349bfe0aaf158255ed2abbe2b9b7687841d4c70c6f115f4111dd80c298ba7c5b11b1ac4afead3a31f1bdb58c967fd024ceebecf62d2cc0c747a748ac0cc669d820e5c874e72c7de3d764e11e3457d58e427d5c426ce88b0962e089b6e7a83a86d109ba708f4ce3ac177abb798e1960a71caff1cbecf6b624a0420da2da7293450672127dd999f8dcfd57e9ea3addfe843e0cf57a76a38dbedda05e83d9b88c0faef41fca0a1c78507429342bce74ff40c1495d2e2f7af7c75e402f153dcf75eaf6628ca0816a451b5843d13a6a1d772d1627c5483d201921d34c49b66add9183281c1399f1591494eaff61177ea78faf69cab7fa09c8c81a9dd3c77de1e618ca8940c8e96d3f1188123b9e828c6f7cbb3e9f68f832a9b6f77dcb4fa37e5a3f6b771061673da7afc4825d3c78f8bf8452367c1e601361ef2c84246bfd76e0e624e199d38057566b0453fc343e98eabfb1fa3560015ef62da2e9168e9a22126385fd56ed014ee699332ddf3dd16e6d2d9d61d472516648f912c55c1d1b82ce5679cc5f27b2cdaf4852875fe6cc4b56ea2a08a5eed9cf23c971e19ae250fa1f92334b98445553e0232f024775afb9cc031ff7f9c712d596dc20f3a4c5a266740071755600e449b3f56a399a04fa5484cd3e61853e159a045b9455654e3de2baab14375602aae034208ff048d93e01ede0e8bf5b90b4aff9b129386ed4b551338ade25785fe21d0602bd645842f957c754107c4102ecf5a0a511ae30216637beff4da6219249824e7614437df5102c805f56475224da2ffe9b0518ac2a6f340c51a9b2cb0e9a18d2b7c3570c3d230b9845ce232b1133aefa46538b3c21bfe943e0f34cf9401016e14c1acca4f848518a8aa459c4625c12ae28aa11aea2d68bebc93f4e0d1e71ffa079ead07ae8b39a52f22565b85655de8e778ff9d00bf393b42e0a0fd11ad6054c06a0d6c2b917a8d0add5b0a7dbb03edfea85108cfd5d57f452d428b269575fb943f39aae1d54bbc61c1c206721edda00d795ad463dde6de8c9d4b0740218af93e158ec3f50881ae13fe9202dd1784e6ef3fe304fcbb3f78dfc8fddde269bd1274925526c99a22950744b2882a78e5d14cd60fe936d80c8ccb14b7308e283573abbfd55806a8c84aeeb15746b6ad0699b7049618d335feebe0488735bec15344492850579c4a817c3bcba736ac51762e0ed55961f891f0a2362ce0eeb157f72c082598f29beae2e65ff1e92b5f172b9cdd8c9e51c4777a391f602b5bb2ca003c273ab084e279b960f3dffbb6d6e31d2eecdfe0e3b785f938077d4be3838aeab4992cb8b2d0fa4de5266294070d279cc32eef0b6655cdb2a0b56aa2c9da92997d81217654e5d6cca8591b3a99a04d09f58cb0950b7c9a022123fe87c481aef9d23525ff5931388345712d27a9f4dd13b7805c2f3cf904ba7ad148a8265832459719df645a5fe8580faacf488a4f1fb31ad473dca180fff1729c1e9a12967f142537f06fb028ec204950a13d0b21e7d88b3cf1163a3be4d462fc3226c77154b04892b61923bcb354ccfa7c4e404109b0fe56dcaf4d92f15dca1a1e133d34ce31e659e51add818e0e75e33df1011d80a1f18d23189b08ff66c2eb2a54025fe74c130e21c46db2d73f703e73e55d9955b9e9ec88b5732bd5ba7e7b8f0cbc90786048ab1240a4c5f83f7d94f9a00d06be7a8f29c1d07adedf8e8be46b2228080e95a184cbb94afaead66b5b0b06f8ff9bbd8bf8223c60724e85894c4dfc1c70b037118439b83396a64f21537a4a1d29df87d14b24b2f0187a63d636122a49475531d4218db84ace7391b5583c4325d16c10443f6ad8243025679d2cfd4a7f2fb51b475a1e1ebe86ccbc53346e251c31742f119e82c4d39e1fbabce6abb88d2cacd10690cbb51b42cd92e8619e34f3df064b9f8875bb05eefc2c2495e84a30a9fe1c3590bbf378e7c586650edc964da62aaf7ebc59ce51b59e1ad99a9a7e7f3943044db1627b2f43d14a558432711aaf56710327a44a97a3a1b31fc8b5b9941efc99f3024cd051cdbd41e63a12c5a90e16a67f2e04743936c69a759a85e85154fdea82b4c2c46c65b1b5ee7ddd96714f33ab733e232d7db26513f5cb7666b9b30fd7e4b6b8a72eda2bbf89593804d30f9def13e1652d6fc98fee56aeaf6ddda8048420fe03e793fa566f9a38ca292770e42850c32cf40e08811447200af62db87ad99175a5bfcdfb0cddb0b86786fabc39baa807ef199b5888edd051cc32a6bb2b4654379dec060c21652bda1e45ad6a40646152cff8be1ffd48742109b48d36249d557eecd00aee36fbd6f3ee7299506d18e0a96d5d7468e9482283a8ff2cbcca4fd77f2c19f73de5e76b8ad7a5906701de313ec7aca70418343687bb09e27f6faf13b930c8074af87ead8c06f5faaddffae0cfb19a73431b775c044d4ffa77300cf05448e205c7454c7db38b86f5e1f6ff77a5dd5dcd6bcc84a118c1dfe6688b56a9a4f280d044e1e55269a0d3f00f6ce9c46d6c3bd2f4849a2b0855f4a54b6fe68a363219f35808fd73405eac749c2293bdf2ce7eb66378d253f56af221360695bd2c7c67fef8eeec7f4226f3f5c975f6d1c3a216220c80861a0eb48407aaf34b3ed1b022a03197ba415aabe95c76430c9178fa8df4806ff7ab4e04578d029c2485ff0b0ac721a1b290a0743f95f94668ccb05701102045d428c44e6da25e6ba462fec82bd431153c8c80a8b53090dbebee5a440fb816e892ce173354d23d48187efcf3e2ef64a6f0a5c4ccbed8e8baff27896436a6f3772d1495d647aff8ba158bacc32a7248c9808638aa9af62516bec95a229a9793d21ee718220ab048e644b0da10fc919ea61218d399dc8f3cd99e7e5def8a34820801be182344e2fca96ffc113dbdf990467ad43dde0ef2cbe1df048eaa7b40b9e27e97f938b0017276a54870b72ad478296740219bec3164d189c3d059fa2a541cd4b7f5b8d0a6f5915abd8a7ac0e05dbc19ef52038783958a073ca3ff2fec302ffe58e0c87981610a63fa95609e784aeffa2075772bc8712aece7b2f319134845f8d2aba691e800c2e7de7270150c2cfe069c805b3929dc0903bc521863746d2ef59e58c35f605be720137c364a0bd98c147cdc5ce0cf1291a96b3ef5a1f2ecad1b21af8959e50d86006e04696f24edff4e2103086f980d01aabef8fa37935b80ec042f27d747c064ee2df57429c88d7b4da9becdb271c21717838886b800a9d2dca9c3ed8c4beeebed47af15e6d52d00a59dc50e1de2c2e78a3fadabb1011517a28f218dd87632c8e2334d70a0329606602223802e91f861fe4b15de8496a0fcca8001f17244ccbb7b2eb6612a4f1c496f4e68c9a8e013ef65b829b64dc574f7e7124546b8c2f37c143d6ebde277e53da34ea78d3d05b3f4c866c91416f1f12d43ff8b679851df06e819642ae2120224b54af99f9c5b6e07a4ab8088a2219ca31815410452e41d1737e56c74c8951c1760503a322fc5b36878a91e0a3ada7bd127627123d9f35b3727987649bcc3a49f4dcb95df1f433b7642b0c515799f7ac218126f60aabdf3b174a98714de78b89", 0x1000}, {&(0x7f0000002b80)="cd4587823ac434871f52c40b1104954ed139fefb9da9614776b762cb7aa88a16682c664f6de0376abe5ccea4c5a254b740cbe06acd87326f2d81df9ca959ddb29bc83fd8ce1823c65d8084404b4ed88443e4077784d12c85c1260233cc305ae19ee80bf1e5b39c91e3095bc472df77761adbca58973db76f5e7afde0bffcc24f0443974b4d270a2e7da0eac6a63d5ac77578eaf8c594d392df3e88f2b686d658b67990d3358cab8636e55462ee6ecaaf3ca4691fcb8b52f265178ffeda6926a18c887e86e1443dbd48c6", 0xca}], 0x5, &(0x7f0000002d00)=[@cred={{0x1c, 0x1, 0x2, {r7, r9, r16}}}, @rights={{0x1c, 0x1, 0x1, [r17, r18, r19]}}, @cred={{0x1c, 0x1, 0x2, {r20, r22, 0xffffffffffffffff}}}], 0x60, 0xc0}, {&(0x7f0000002d80)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000003300)=[{&(0x7f0000002e00)="7eb3f0132801a9164dc545f53886104c004b54522e5da8f1003a95389b0de5c6d9f2b9a3f0da6971aacece048443b58f2798c31c18eeb8604047b6cbee426e40e2827390fad24cd8161593cefb7712e7f65fb319d23580df45f5fbb27739de10b57c298954a06fe93d1403a2960389affd7ef4074bc22fac9e50", 0x7a}, {&(0x7f0000002e80)="d95792af954b51eee48668fc925e063ec7b428cbcadf2488d14944203c041cd3a532dfedb47c157e11957af387ffda7275304e1be34d581e91ab386732d613d5151add04e5fc1e290ad82133d8725cca84b3396993a904ef3c01f22d87b9638a5e8f1ab5c670a92a2b774ba0722f7f8dfcc930168ad9311ac1d54b2d4f5e1132ef2abaf8089df72d71394bab56a3e12413fec0036a74651fb226f435c4d559577252bc0dac34c6abb16274c76fb6ab9236d51d75c5db431e2847ef1aff709ae66de1aedf1f4d5bc6194dbb5f674dda7b3612cde5ab47f86908f9", 0xda}, {&(0x7f0000002f80)="e6badb0854855a62bb95da00df3c680d3e5de61a310984b67ffb7fd51a11dcf0f63776f0a6b0958068b774def6d283a6a09c08672ab2c7", 0x37}, {&(0x7f0000002fc0)="decbdc90caccb8e8640bbcfbc45295ce89f0cc0f9583467dd1f8ed4ec9f1589c651c4be84132de9c7e2230cc77ab886160c56803278fa072ac56003027dd7f27afc97d956eead037fd4a1033dd178a3a041abe6fc319e5072a6d5de5517988782d78808de11a5460dbaa39ebffaad6e26d0cd878b6fef30cbf8a8cda24ef15549876a2204c9e637ba16d9aca7cf418de6c39223e6901610dbb388077971e6e346dbd75733ad008578d5c7b9488046813f22bad0ed7669530810f63df", 0xbc}, {&(0x7f0000003080)="ecb7145c65c64d458d4e52b09180d5be6ff9121e46029e2d1f41eb5455d0afb5eaf283f1e076fd46d96bcce00bfb3d5970d5e947c5dfaaf47b7a2c7fce48589c81a62c3f371a3a718edf76a80c353b330d8f2aa3f3a65e9ab46076f3b25a776b680409d012049136bdb6af08a2cbf37bad3dd40588fd45d4749f08d12e4a6cb3d3239072075350897a4c03e9afc6722f6e0b35317a27ccf10effb172dcfdbc3c130c4e5fdfacc735b8ad5c4c4b99cd8f0689c3f37315e0", 0xb7}, {&(0x7f0000003140)="0bf854ce4c02f47319443faa8c12c921d96791c0210d3e5e7098d6f9bffb2e0054a7035e26f9071b6d2c4fc62365eb6b4b53353d08c89960e40916e66a4f9654568d921f613682d4c877db5d3677c820acc95ce83f27e45df05f08bb6a2f69a04c12b4fbf53bde221f07530ad8f7849293a861010576609b55f8b94f2ca8d81041e956d0d68178991cd861c55045dbe85cda5eee95b3639af3e89e9f6815edc4f1438eb87c349d168868fb2a8d1876bcb5fc4e15160c4669e346381f42ef1cd8e7b98d594beefa8257e5e279f37d4b6546b866aeb3", 0xd5}, {&(0x7f0000003240)="1a63f6adf4ec91e276b6b153d92f0d39e8c6fb46e0b4551abbac362e938bc504d95df562f34407b19aab163cf26af422d4ac34a5f37c73e906d7700057ad63badc1c6bce4bfebe20210a8e6f3f48bc08db0607c0c9f6f8781087841be860fd22daddef68ac2b8f58c930a4aec580f611e071ea303aca2a408d428c3df544a38eac402dda51423652ad86ee4bfe93c05bff11aca71fe5d0d63a168fa913d4a717445e71556be5b2bd120a4080703ae31d11c8", 0xb2}], 0x7, &(0x7f0000003540)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r24, r25}}}, @cred={{0x1c, 0x1, 0x2, {r26, r28, r29}}}, @cred={{0x1c, 0x1, 0x2, {r30, r31, r38}}}, @cred={{0x1c, 0x1, 0x2, {r39, r41, r42}}}], 0x80, 0x78481a059954db40}, {&(0x7f00000035c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003780)=[{&(0x7f0000003640)="e39b8d56967c35a6709807ff3c34", 0xe}, {&(0x7f0000003680)="ec36094c7293109d913d7865dc4a08f27574848220ab6a1d5b9d49853cf30e7cb44824cae5ffb16d899fd8799d29a251b156869d6b5cc3955b955939af64ad9bc82e8eb634bf292a6af3f59c1cb596d5ddb9c9e55183f3bba5a5fbf2edb6e7bd43192708d308038c58e9ca6d852d359b9370ce3c6591807295abbd4583ffb9128fba1596067a6383180918c8056e334b54736116c21f02f212b4a8f4d838cde4d62f4b6cfd28bb72596359e73838065e5ac4f5f0741929a1ba5a13cade2ea7de0b397fd85b8fa52567401ab7a722b61876c888af36ad9f47d9152c9c7afde0b844cabc4fd9a6718a89", 0xe9}], 0x2, &(0x7f0000003800)=[@rights={{0x28, 0x1, 0x1, [r0, r43, r44, r45, r46, r47]}}], 0x28, 0x4}, {&(0x7f0000003840)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000004900)=[{&(0x7f00000038c0)="775c1af47f2ef29db6310432571c3372d1dc901d24d49d4c7781f0bfeeed10d9", 0x20}, {&(0x7f0000003900)="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", 0x1000}], 0x2, &(0x7f0000004c40)=[@cred={{0x1c, 0x1, 0x2, {r48, r50, r51}}}, @cred={{0x1c, 0x1, 0x2, {r52, 0xffffffffffffffff, r53}}}, @cred={{0x1c, 0x1, 0x2, {r54, 0xee01, r55}}}, @rights={{0x14, 0x1, 0x1, [r56]}}, @cred={{0x1c, 0x1, 0x2, {r58, r59, r66}}}], 0x98, 0x2004c040}, {&(0x7f0000004d00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000061c0)=[{&(0x7f0000004d80)="5e1e477a042ced7369913eb3d188b2819344809252fe20dbae7894e224aaedf9c3f0f247f1f9e0b42e14512aa3ce59", 0x2f}, {&(0x7f0000004dc0)="6b7fba73", 0x4}, {&(0x7f0000004e00)="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", 0xfc}, {&(0x7f0000004f00)="989938f8100ccb9cc65acac8e266f5262db6bbf51a36d774c53d25ceffc72b463b220dbef8e7ffb0eeecaeeb1bc4789d728329dad96556fbcd6c56f7aca362f8e513a4456410d8b07daf20c8406946d41a40cfe6209f9bf5ba8e32220cdd1f12741df9f953acf6778797c3a001611c9794a5402da2e0e60e430afd324a254d68016dc0f710d16c83b357a7e461bc0953ad70da0cb2c4ffdd2ff2f7a72f888dad55295b0d1cecec2531c47662e6", 0xad}, {&(0x7f0000004fc0)="70c8921415c965dd51d1881c1a912df61aba5c3e471f23690800dbbdcdda92d697dd07de2833e0a25543182e808d8b9e5cabebfb824cf00f1e89194c14adbdc48eb22059c67123a721559ef8b55674e4ddba0ec88c9ea558bfafa26657a7c20b5ce84b515acf", 0x66}, {&(0x7f0000005040)="d2b14ecf5a5ed9ca30fb4f", 0xb}, {&(0x7f0000005080)="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", 0x1000}, {&(0x7f0000006080)="9e150462b997956890c0de75cd5ea8fee047e3ba32cdf469443e2b571d7d675880fd6540ddae817fb81b9b8a49feee1cb5d1707848f49fd6bbce10d44767ffb0e7ce7d2532bc7368e0a796c937237f9802db9eefa53b5e7a2d4c807721db35d45a36a6f541ce221998a913c38b015b3ebd4c423f3051124d6c15fbd2fcdea169df42acc4a60bfc4efcb68737a2ae57", 0x8f}, {&(0x7f0000006140)="6a65e9e6943a5fad62396d938054bfd7ea6345fefcf2dcc4729addd167c7fac11edc32dc6e1ba63ab824ff97c45d9d0c7ac2a221abaf0e40edad1bdf87a23f9e5a6844524339f506f87fe40ef6af", 0x4e}], 0x9, &(0x7f0000006300)=[@rights={{0x30, 0x1, 0x1, [r67, r68, r69, r70, r0, r0, r71, r72]}}], 0x30, 0x40000}, {&(0x7f0000006340)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000006480)=[{&(0x7f00000063c0)="71cf43b9", 0x4}, {&(0x7f0000006400)="b9c518ea62a5c74b1fdc3ac8968e36d14c61605072ead36282a8974310b5df54ed475927c739e51ccff22b2c9df2427822afc0f8c969516abd09afca5c467fb972990571318f", 0x46}], 0x2, &(0x7f0000006840)=[@rights={{0x30, 0x1, 0x1, [r73, r0, r0, r74, r75, r0, r76, r0]}}, @rights={{0x38, 0x1, 0x1, [r77, r78, r79, r80, r81, r0, r0, r0, r82, r83]}}, @cred={{0x1c, 0x1, 0x2, {r84, r85, r92}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r93, r0, r94, r0]}}, @cred={{0x1c, 0x1, 0x2, {r95, r96, r103}}}, @cred={{0x1c, 0x1, 0x2, {r104, r105, r106}}}], 0x108, 0x48800}, {&(0x7f0000006980)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000007f00)=[{&(0x7f0000006a00)="2c4da430d92a6d2ef8868d56b2bd9e7247f77c54c5b5e70d729f09895a2406ed4ed7288d22735145ed6098a6e09310f73ae12402e21a51f11f9603e7e3f65a59fc291751f014b3c566598c1a889b0d01900d1b712c76e914d9e43792b6ad766361efffa396d54563131c81efaed14a0fdd28932746617202dce62b6c5da95c2b68246a77c886ea4d2c567a63f3eb478c8952faafe57bfcb812b2a21c31ba7b22378de3b6bf7e4134faabebed04a1a6bb1d7c9114859e0e148dc18ce544379dcb3791c24032eba8fb5b7236474411adc97984c9d2838e3cad47f610057aa559", 0xdf}, {&(0x7f0000006b00)="2df80f211f43b56955089ddfa3f324fc9b826f34372de762f9c1d4edb95de8427d9dbc6c3aa09ad306bdf7b1e0db6c60acb9fee5d9876ea9e3351e02d5f27e9a66b2cff5b92ddddd2f5082ba8832b28591974a4d59c728033b18f573728a0b7f9bfe7cb779063ab7da91101d4a5d7841997d58df47ac40475d60c741e03aa60669664240549e07270e3411438b30768bd2650c5bb125cc9ddd328f9d053b92493e9000b4cd067faae1db6117236852b06c06107087b15931e3cc65516f5485afc8940dafa9ec787c4193d5fcffc7b23f71ba9330e5a3e934b09db741e73f87788f7d7cba1cdb2cffd75a04201c79078e79", 0xf1}, {&(0x7f0000006c00)="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", 0x1000}, {&(0x7f0000007c00)="b5ce09cbd4bd61f58ab1079ea6b96717b6f890093d016dda5ef1c551e9b25d7fdef7e557ad1ab64f7a16f151b0866a7550b9f06158c39d9dce0b65278f963b736492041c513d612fcc73f59e6b24ae33a0bddc5781ab068c65447427", 0x5c}, {&(0x7f0000007c80)="0b6108c175ca57d2a0fe88c8cec56d3c75834b2cbe0bb09b8fa13f18847f581dad75745eb5008d89601050265a5134c49873d0e68ffe20e98134f07407e5a7cac4f9b0ce030ecebfa76305a1e9e644399f5afc9deb2e3717b9baf243db7d6dcfa0324a4fcfda4fc79de18bb73ac450bd6d2dbfe2b6900188476acb6a8795cecc98193488e6698c342a1ee71ed47a150b7783ff1751d8afb2337372daaaf5143bf1239d347fdc46b872d32a9b86ef35d093e6", 0xb2}, {&(0x7f0000007d40)="f7fa9618fc53d1f614503f44bf60435f061bceb9dc48da905657fdf8f291d8e7adeb776974c9b143df5d63e8298b723480166d20e13ab9f50db01d4356151c6a657b240e57f5d5c86fa8a5649c902b40a7dca496fef639052d1cf38163f7171641da1865a514a0e3cce3be998aed99ab08426cb49b71ca682b3be9f7ce016c1469b381c4987c07de19b3f97e4e756513c2fe01f46462304f79b8fc351d50ad098227290f97299e81f29157b2d979bdd00c0f1908f3c51962e22e652c0c9d3000d8da72c1e086861b1ac5ce222749916f2b32892b006a03d1717b8a5a1fc4c248aa8d197801982d06453d9fb37845d534fa6b12693cad25eb8f7f5d8b95f9", 0xfe}, {&(0x7f0000007e40)="fc6e27b38ea4597d276274863069a9ffd04686cc56c9cb4a2b9ad7169111ca635a49fb018bf07e76fb21e1ceaa1dd11abd5234048b9d7b4183a5a4ee740f2af62631ca8bf5e247d30d0dd21160e0f128c771afbf5f947c81d7c05b5c2c99694115b70288c44722b88b9bd278484ec430f729937b9666506936590e527b4ef26fa5", 0x81}], 0x7}], 0xa, 0xb90f6b4e5f74894c) [ 1161.505973][T10453] device bond35 entered promiscuous mode [ 1161.533799][T10453] 8021q: adding VLAN 0 to HW filter on device bond35 [ 1161.576970][T10455] device bond347 left promiscuous mode [ 1161.586283][T10469] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 14:58:13 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0xfffffffc}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:58:13 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf00}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1161.845370][T10485] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 14:58:13 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0x900020, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1161.931761][T10485] device bond348 entered promiscuous mode [ 1161.951319][T10485] 8021q: adding VLAN 0 to HW filter on device bond348 [ 1162.012916][T10486] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 14:58:13 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, 0x0, 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x60, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1162.108225][T10486] device bond36 entered promiscuous mode [ 1162.114103][T10486] 8021q: adding VLAN 0 to HW filter on device bond36 [ 1162.213135][T10488] device bond348 left promiscuous mode 14:58:13 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="2e0000003500050ad25a80648c6356c10224fc0010000b400a000400030082c1b0acea8b0900018004021700d1bd", 0x2e}], 0x1}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="780000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000120500580012000c000100697036677265002548000200080008000300000008000300000000000800040001000000080011004e21000008000900010000000400120008000100", @ANYRES32=0x0, @ANYBLOB="08000900020000000800170001000000"], 0x78}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000280)=@newlink={0x20, 0x11, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x100}}, 0x20}}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000001a80)={@loopback, @empty, 0x0}, &(0x7f0000001ac0)=0xc) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000140)=[{r6}], 0x1, 0x200) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000001f40)={{{@in6=@mcast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000002040)=0xe8) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="780000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000120500580012000c000100697036677265002548000200080008000300000008000300000000000800040001000000080011004e21000008000900010000000400120008000100", @ANYRES32=0x0, @ANYBLOB="08000900020000000800170001000000"], 0x78}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000280)=@newlink={0x20, 0x11, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, 0x100}}, 0x20}}, 0x0) sendmmsg$inet6(r1, &(0x7f00000042c0)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x100, @mcast1, 0x2}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000140)="151ebf9317e8e3c1b1dd14a572dd540652e157a057c57644c39a6058c80ce7565b1e99ab6fa658f318c2c153818d3480456a5a64cc057182110887a2d4fc3cfeb04e01a4f59e30874bab0ea1b1c53d156471be48b0ee8f8d6b02726bc2289ee2135b97edbda48d6f65295afd4e2aab9ad87b87f1723cf0131523ad5fec17dff7837d903a0210f7ecc7e4ef1d5e68d7df8b058de9508b89e4bd8b7bc82f7f06e8ca65e054e2b2e6cec86f8fe0d864f408604ce7492458e12773d9cbea89b448ebbff62513f2833ce17f8c18a37e2acdc6ec0599c985b4e571de44a57e29c1eea8ae17753a8d0d", 0xe6}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)="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", 0x1000}, {&(0x7f00000012c0)="f0e53820306d0dc1c2acec0cd55775f7d3319a0c5245cf94258763eb6537636f1cd6c688d73fbdb66ba264ab0c323d96c558ad9ceeb674ac9c13dc8754dd3a33490b6e9797ecf63a826ee8a9a393a0656710fe62e4c4a20317a21b2fe68b4ab03c4aac79615a4637f2179896c2ec790e4bcd478e1b347bca2b8b", 0x7a}], 0x2, &(0x7f0000001340)=[@dontfrag={{0x14, 0x29, 0x3e, 0x9}}, @tclass={{0x14, 0x29, 0x43, 0x7fffffff}}, @dontfrag={{0x14}}, @rthdrdstopts={{0x150, 0x29, 0x37, {0x89, 0x26, [], [@calipso={0x7, 0x58, {0x1, 0x14, 0x0, 0x5de9, [0x81, 0x5, 0x7, 0x473, 0x6, 0x3ff, 0x6, 0x5, 0x8, 0x0]}}, @generic={0xff, 0x7f, "6a3346135ba6bee09852554a66d67fd4a063dd43c01651fe206e7a58f9c0c2f6c292725e66a72605ccea874e63c8a65df2894c1f794187ecb526894952dd7dd2a242cb8ef8020d63f2ff1992565305bf7f4225daf1c04fc6f84456e931414b3a924be497508f9c6e724fa5218db44043df1fd53f0c46eb18c6aa4709a4d801"}, @calipso={0x7, 0x58, {0x3, 0x14, 0x6, 0x1f, [0x20, 0x1, 0xed0f, 0x6, 0x1ff, 0x7fff, 0x7df, 0x5, 0x6573, 0x100000001]}}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x6}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x5}}, @hopopts={{0x28, 0x29, 0x36, {0x0, 0x1, [], [@padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x6}]}}}, @dstopts_2292={{0x68, 0x29, 0x4, {0x0, 0x9, [], [@hao={0xc9, 0x10, @local}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @padn={0x1, 0x1, [0x0]}, @jumbo={0xc2, 0x4, 0x1}, @pad1, @enc_lim={0x4, 0x1, 0xbe}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @remote}, @pad1]}}}], 0x270}}, {{&(0x7f0000000240)={0xa, 0x4e22, 0x984, @remote, 0x5}, 0x1c, &(0x7f0000001680)=[{&(0x7f00000015c0)="6a095ba656d8181f87a3313236f8acfc1fbe9858c0fa3f7e9359ea8eb9b583faf75423fd012bc190defbb98ed1b94768df024238e9e1efcf80f0b420a971221a4ec746781b6c426cc8c54aeef6105f7a64927105680a26bb33c558f6707a53acdb739654defb4df8712dbd1c0e7fe4c508dc133e6f448a3ca012707c8dde6eae923ddba548cb", 0x86}], 0x1, &(0x7f00000016c0)=[@flowinfo={{0x14, 0x29, 0xb, 0x9f7c}}, @dontfrag={{0x14, 0x29, 0x3e, 0x7fff}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}, @pktinfo={{0x24, 0x29, 0x32, {@rand_addr="f790af355e4a1d95f77cae4b55381812", r4}}}, @hopopts={{0x80, 0x29, 0x36, {0x67, 0xd, [], [@calipso={0x7, 0x18, {0x81, 0x4, 0x20, 0x1, [0x5, 0x1]}}, @hao={0xc9, 0x10, @remote}, @enc_lim={0x4, 0x1, 0x40}, @hao={0xc9, 0x10, @rand_addr="c84eaa2273073d4863bc84db09c9fb29"}, @hao={0xc9, 0x10, @mcast1}, @hao={0xc9, 0x10, @mcast1}, @pad1]}}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x2, 0x1, [], [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}], 0x110}}, {{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001800)="ff4c1bb4db135e977742389e4271a58c1ce948f5a1baa01028541dca493e04041a5044c178bda6b3d0d4a4360eceef8f7edacd703fc7423a76ce821bf42eb6a35c95d14f2cd4ac135a", 0x49}], 0x1, &(0x7f0000001b00)=[@tclass={{0x14, 0x29, 0x43, 0x18000}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1d7}}, @rthdr={{0x38, 0x29, 0x39, {0x33, 0x4, 0x2, 0x0, 0x0, [@mcast1, @mcast2]}}}, @pktinfo={{0x24, 0x29, 0x32, {@empty, r5}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xffffffff}}, @hopopts_2292={{0xd0, 0x29, 0x36, {0x2c, 0x16, [], [@jumbo={0xc2, 0x4, 0x5}, @pad1, @generic={0x6, 0xa8, "e5f7a99a92f0d1bf217deeeedc6a285c778176dbc5ebf863acee641e44d29e251ad5f38308b834d948eb5c1c7b56568c3edfc41ecbf8741817b9acf8dca40387c141994390430a21d9871fee7a83972c0a5773d5558cd375d1ea0dc1ab607199044bd61819450fb8e8aa0e2dba8ca9a383b8be2b6c172cbbb79055ae2c6e074d5a985915376592dca55ae10704bb75090127acbf6f96d7394265ac786ff4b6c0ad39d8a8b75a1679"}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0xf2a5}}, @dontfrag={{0x14, 0x29, 0x3e, 0x10001}}, @rthdr={{0xa8, 0x29, 0x39, {0x2b, 0x12, 0x1, 0xfe, 0x0, [@remote, @local, @rand_addr="329d510c41177dedd318b6e72e8506d9", @empty, @mcast1, @rand_addr="db84feda60f42e6355f37f1367c12033", @remote, @ipv4={[], [], @remote}, @remote]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x240}}], 0x268}}, {{&(0x7f0000001d80)={0xa, 0x4e24, 0xfffff671, @dev={0xfe, 0x80, [], 0xa}, 0x200}, 0x1c, &(0x7f0000001f00)=[{&(0x7f0000001dc0)="63c018f0bb5f9c98df90fbca57ef462c7171ab7c2bf3f455c12982ac816e242100dde583a57990e9effaf7027c5027e41039ef2416f986a80a0516d56891e08ef85eaea91aa66117cbd138a93f654cd85eb5c306b47da9bb73f5952cd7a6780f87b72bcc06348415ece15119e72775135d2b09e1e64603fe71031750e64649fd7ef38d7cd3f5245e5f0a4c82e2aa171a2f2878cb5a3acc8b2c03", 0x9a}, {&(0x7f0000001e80)="6e565cbddda660dd95af69f940feee4335e8f574fdca6f45ee036fe95f508fce4c200fa27ec72ccb5bbf6ab6167d60496eb3c28c59887ae7060298d9b1ddb7b00af33492eaa978fd6df9db074227f0bcc3d15b1457a3f926", 0x58}], 0x2, &(0x7f0000002080)=[@hoplimit={{0x14, 0x29, 0x34, 0x1b}}, @hoplimit={{0x14, 0x29, 0x34, 0x7f}}, @rthdr_2292={{0x48, 0x29, 0x39, {0x87, 0x6, 0x0, 0x40, 0x0, [@initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @empty}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}}}, @tclass={{0x14, 0x29, 0x43, 0x80000001}}, @rthdr_2292={{0x48, 0x29, 0x39, {0x4f, 0x6, 0x0, 0x7f, 0x0, [@mcast1, @rand_addr="6aa3562adb1d6e29a29818f91cee1840", @mcast1]}}}, @pktinfo={{0x24, 0x29, 0x32, {@empty, r7}}}, @pktinfo={{0x24, 0x29, 0x32, {@rand_addr="0234863dc880730046d8caf80b197a80", r10}}}, @rthdrdstopts={{0xf8, 0x29, 0x37, {0x16, 0x1b, [], [@calipso={0x7, 0x18, {0x9, 0x4, 0x1f, 0x1, [0x5, 0x2]}}, @jumbo={0xc2, 0x4, 0x20}, @calipso={0x7, 0x10, {0x9, 0x2, 0x4, 0x401, [0x4]}}, @ra={0x5, 0x2, 0x1f}, @generic={0x40, 0xa5, "3aeed89d6453405d9eaaace315e6ba59091968447845e76b4c4d6a029c00bd6b4dc041331f1382707057f28b85aefc4004230a85fe79f06cc57f857e2368cd9b29860020d7514eb4a06c032598d71e4aa86e17270d39b53fcba99b4c920a3d2fcfb2fb7e1e693058bb187deb2c0a65f343357ca5b0a65d6d51319e16e16aca56736a3de65599c7981be73ab05ec390019c7c9e2a9a95f081e627475814ff5f490931cca28d"}]}}}, @dstopts_2292={{0x38, 0x29, 0x4, {0x2b, 0x3, [], [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @ipv4={[], [], @local}}, @padn={0x1, 0x1, [0x0]}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}, @rthdr_2292={{0xa8, 0x29, 0x39, {0x0, 0x12, 0x0, 0xfe, 0x0, [@rand_addr="e0bafd66ebcbf62c73b3cd5419251da2", @initdev={0xfe, 0x88, [], 0x1, 0x0}, @remote, @rand_addr="4d2e77bbe81b956d8234500ba7945e76", @mcast2, @loopback, @empty, @rand_addr="132e92d36d0bbb7de541ec1e29cc00fa", @mcast1]}}}], 0x300}}, {{&(0x7f0000002380)={0xa, 0x4e24, 0xfffffffd, @local, 0x2}, 0x1c, &(0x7f0000002600)=[{&(0x7f00000023c0)="f6cec9c9a3f82a09849a4a273bebb99cd58d6f81b5cab8ab246b5f13ce1b292354fa9a406d73f4ee2aff73eb6860347fa010805d409f1eb7e626804e39ed9dcd0446a11c7e18e549512f18d5a23150aee740b43aa71be0fc6966d763ba3f7c47c71ff4730ddf5e6923a364906eb267e11c25209af88f47aecec3e20c52eca0cff862be6f592b8fd65f999afee3d53dfe42844d21c614fa9f65df858df6ace7c755348297e0eff371c848f568d689d16a632cee73cc20090399589e43a97cee5619abefa0d59a502ef60bf9585eae04ef46197ab64878ef45563512575241b40d2fd236e43a02b0320ce3a009aaa6725598a68e", 0xf3}, {&(0x7f00000024c0)="93803eb49a73735c430bc61b75fbc7378bb30c092473a8dcc7b418262f622305b2a17975e20e14fdbfd43d35efa1cbe564e62a5352ed00745617fcf25fed80ca119f9b0e1559a5c2694ee7e588c645abeb6c21e8c2810ca43a5d0e3765b59fee893d3bddb5c7d1e23673b86d3e2d2a14e16081e7893f3155690348e8f646c1c180cb6d493b3caeb85bd6f843335a50385af04a1b56ec4982bc53ca7781289fb1e7a7534ac6a463d719727be735f37f34662b3d7bc0f0574d2051043b89", 0xbd}, {&(0x7f0000002580)="0bdaac79a6b9f8d7264e088ec784634e06314bf26c9da3f3861f23bc390f96a1fafbb63776338f8cd44202e165bded566df3a4b34e88c34db26044dbe713196ee2fae802c769e964a3d940649dbb8c908be79a64d23ca1e8dfce8fd6bcdb87391a2500739271a11f97afd0ae93b19674105935d7eb565444", 0x78}], 0x3, &(0x7f0000002640)=[@hopopts_2292={{0x38, 0x29, 0x36, {0x3c, 0x3, [], [@ra={0x5, 0x2, 0xe4}, @jumbo={0xc2, 0x4, 0x81}, @hao={0xc9, 0x10, @mcast2}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xdae}}, @dontfrag={{0x14, 0x29, 0x3e, 0x6}}, @dstopts={{0x1d8, 0x29, 0x37, {0x6, 0x37, [], [@enc_lim={0x4, 0x1, 0x7}, @generic={0x4, 0xd8, "8604f0b28b7f0b0027eef3f8e3bf06cbe1fb585b5a78befde22863bab6b0aacae035a49ce338fce679a073f96fef4017cb6a8fd9e750c1996c94ff4185fb38d76b1f68d6b48501b32f22dc0f5f30cf9214df7a2fd494e870f9af97fbbde22f7e1009146b60b942732928bf13abfdd5f52dfebf8a44c27f82e22b923b2577599551365a08cd8a16c74f022bd1e7f6d2d32a404534aa140794c672c7030ddfab42de6b9df3bbce06052fd76adb9693253f38a77cb98f3ff87a7e769275d7681031faccf01fa60fdec94a64dc2a85b9678f472e3e980952fd35"}, @generic={0x9, 0x84, "1bf43fb9754697f91bcee2cf17d2f6651b2ee6474a442073f5108abc3ffe60d5c08e8b10edfebcb0575b3a240f616a7182bb9518ee725fbc40f0c9b9d95ccaea5a1dcffcccb17174b05dd0a92ecb554bb8df3ada6605321fe16f40e51ee5db1129d94c773314445ef8ff2133eecac337168c32f04b0c283e6ef15d4df0f0bfb2b71b5411"}, @generic={0x7f, 0x58, "7b884f78ba4cb8cdc636b285a68378f76d9c48f04b1a474247978df7030acb4422cdcba35bf69a31223f05fdfc4281603813334e931a989255fc19421ee2d1400ee78c24e99763751909d794cdb33bb8e2c8df17acd64b70"}]}}}, @hopopts_2292={{0x108, 0x29, 0x36, {0x28, 0x1d, [], [@enc_lim={0x4, 0x1, 0x1}, @pad1, @pad1, @enc_lim={0x4, 0x1, 0x3}, @enc_lim={0x4, 0x1, 0x1}, @generic={0x2, 0xd8, "1ccb80f123601587e35d291d181fd85eb98a6e5fa2b991c9ed6a88302a13af4ab1ec11f55924614952002d3085ae8c5eeb0dd19820baa0486e12e95dbbd5e23e892e7fb351951d2169eda23e2d26b23da2b60e1f5433e9be8cce3cef14dfcdaed576b493e89c452991eb847ecc457137f909d0fce6d79bbe1a7ce57cca1829665ce45531b0f78b93b273af6b4957d5bff8cafa2709265330ae5ee99c05c21d2c26197de7e7aeb3135bdaf42e930830f98b024b51405ba537c3c4cd4eb723f23520d851e19007a5482e0e4a6c263d6c12f1b5dd8e223d669d"}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x10001}}], 0x360}}, {{0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f00000029c0)="b7bd0c156c618f32bf3145e046c932abca67707e0236280709b161c25ad939296a4c885b22059da151fd5c4ae4cf8dd1cea3f3f28151e4ec1f250735236605f3c8f9ca716a24176f228d2ec14462e85d69555b164320d43f6377d7c3c83857528849e877adaaf2afb80a9ba50c6fe4e0d6b111602262e8d62741811f72cde015b94e17a5d318800f88d4de3991b6b2f4be5dd4b5a2d9833a7d9dcd721d18316757595653336a58dc8759192f16bdb2fb9b51a962ae40", 0xb6}, {&(0x7f0000002a80)="07328fa1f8c67c54de336a88c5eece25a38c6c0b3862c3f8d78d60d20e0873f201301bbef0161477713169b40fda76f591e4936dc942a142bec09c3fdee344030dd352620e591772b620e9e6cbc9fae1e1238436843482fea809265dafa826c0b63450ab8bec00766ec367183458680d07aea343ba114c5cb9e0a2f3b55a99ba941c3f1c24dd755df38c8a56f76beec3b4f2ba70dc48cdd2dfa5a1bcda63c6d2d841bcce77d3bb7cb1fd8872c013be5123a5df16fbd0d0b0a327b86939", 0xbd}, {&(0x7f0000002b40)="91276625fd9245f55e946f8a407b07ae85fa0b8ed16f9aa7833c822d034394bfd286ca4a870fd75508b0d5e2d25e31c7dc88db43b639ec079fc8683c90262dbec5e248aeca0f", 0x46}], 0x3}}, {{&(0x7f0000002c00)={0xa, 0x4e24, 0x7, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xfffffff7}, 0x1c, &(0x7f0000002cc0)=[{&(0x7f0000002c40)="78e550da4ee529fa39ecbbd6edaf358cae4f30daf29f5beec9e99f79392cd671344caa273a19c2069d4d89177f6aa2647ed382d08b170d083d021d6be3361203e31b8c42b157b942379cfccb47a5ad31873466eb7b5b432787f5254b19f1a5e7eeed60db9806cc86d1", 0x69}], 0x1}}, {{&(0x7f0000002d00)={0xa, 0x4e22, 0xe5, @remote, 0xa0c}, 0x1c, &(0x7f0000004240)=[{&(0x7f0000002d40)="18b8878601239d23ec3000bf9ac81d6fb2e500b84f243b1c38fe4abe06db4659a3dc0b35b3ce60e9e95115c16f2c9b2db5bb1e7194c5379372f4a6a645736621ee93ca2c33e4782db01ef4f5b711c2a99ea050149a08c136f01675122f40df38596aeeb793aae5f92a1dddf9edc396c9111b1cb57ed607487eb93e1a278762a27a0d0bb9d393de5dddd70b51698b58ebb39b18521d232e470688bf19a70c614bb88b05879c9a158bd5381f75ad88e5424c51a89613066c5e9d0ced44c151f52fa37a137565e064bbc373d6f1240034b287d50127b21142b9d717e5960edde10d3fd6955038c68ed8b24226cdd0a4dfa5d91fe8e076c2b8d1", 0xf8}, {&(0x7f0000002e40)="55561407a98f48a7", 0x8}, {&(0x7f0000002e80)="91a9940652c2ab73cdd92c6864127202990ce65348341703d5241d5629bbca9c81f4fcdaf2ff189f95da76e2f83013292c547673a70c2c5def4f1f702bfaba6298173914b1800a0c463e62ab624200ef612a2b3990b4087562e54f7db64ce46bb8645ea880af078b867060c090ec4ad9a0438e9aa71e74f5721cc41caaee25197e8a8400e7415dbb473429445893c8abe8e60db2b9deb09a5234738edece8b092bcd0f6fc5503fd5cb272e013acf96e4b3d1466c3c0de43417e1ec34ef68e30c6c80c99fb3651e90edc9a9a69bb29564ea86253c5826cc72e55e", 0xda}, {&(0x7f0000002f80)="bdfe9fc1784685671671007c3cfb08bf34ca72f3644ae78ed0f50bbea2ac776c72f7f62d5b367ab78b26e12b14b1cc4ac56f9a10a4ad7721de055dca861c630461debaa7473d6d88af1f935e194ca44b4e07e48e27dbebc752dbb0a6616047ffa4762e0527750000c133f3c9b3c19ef2838dbaed770c4c17fd8d2d045ef6ea3163659d124e5a2bf82b7d26e515ca4f3605701f88f163a966868a4de52a4d6cf644baabc28994a45b164b102228d7e28e3fb35dacf17e2ba72db4c3dd36c8f3718b", 0xc1}, {&(0x7f0000003080)="990402a871f07243f0d4c4a279d74c401be48582f5901f0e24911cb8ce7a7cdedeef246529d07afe29fc09ea6e3feb55ea3907b9daed803267d6b55f6e4674c2c75d318dc1b1255e99f9c513dee02de6c700059e0f22d24c35c8018f5ccfdffdc99d695c3c58db4e0af4540e7f796454cb6724bf79dc1b11cf8fc542afa6d355d417836945df390f525c1d8bb67220737e5f2304968c00a09eefe2f5831595bd416901b998f7bb567f81492775662f00000c7e5656d63a9c58fc69a2a95d1f63827d5f0ec3705b0731c75afca465feaaf8a1a35f102e534b03", 0xd9}, {&(0x7f0000003180)="01a2f21384cb56a97f2620", 0xb}, {&(0x7f00000031c0)="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", 0x1000}, {&(0x7f00000041c0)="713bf11739f9dec519d7c2a24e5f67bc905788c78ba90ce9477859a88a481da22feb2e279c58791e849e768b88fc7ea2f074bb101d7522d2e1d5ecd48a352f81d93f499f113d20e391f22c2a85a0e9fd732cbb910fb977ffaccf47a25539bdfabc140896e5dd907e2796efbe3f555515543ff4f4c612807c900d7578231c", 0x7e}], 0x8}}], 0x9, 0x8880) 14:58:13 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x81, 0x1, 0x3f, 0x0, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0x100011, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:58:13 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf00}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:58:13 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0xfffffffe}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1162.522852][T10512] device bond37 entered promiscuous mode [ 1162.543363][T10512] 8021q: adding VLAN 0 to HW filter on device bond37 [ 1162.617924][T10519] device bond349 entered promiscuous mode [ 1162.639421][T10519] 8021q: adding VLAN 0 to HW filter on device bond349 [ 1162.689005][T10522] device bond349 left promiscuous mode 14:58:14 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:58:14 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0x3, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1162.932780][T10531] device bond38 entered promiscuous mode [ 1162.993090][T10531] 8021q: adding VLAN 0 to HW filter on device bond38 [ 1163.060523][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 1163.060540][ T26] audit: type=1804 audit(1573657094.440:951): pid=10515 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir923645982/syzkaller.aWZZDI/794/file0" dev="sda1" ino=17374 res=1 14:58:14 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="2e0000003500050ad25a80648c6356c10224fc0010000b400a000400030082c1b0acea8b0900018004021700d1bd", 0x2e}], 0x1}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000140)=[{r2}], 0x1, 0x200) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = open(&(0x7f0000000400)='./file0\x00', 0x1734a8cb798a03f4, 0x0) setns(r6, 0x2000000) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="780000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000120500580012000c000100697036677265002548000200080008000300000008000300000000000800040001000000080011004e21000008000900010000000400120008000100", @ANYRES32=0x0, @ANYBLOB="08000900020000000800170001000000"], 0x78}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000280)=@newlink={0x20, 0x11, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x100}}, 0x20}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0xe, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x67}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @generic={0x8c, 0x1, 0x8, 0x40, 0x3}, @generic={0x6, 0x7, 0x1, 0x6, 0xffe00000}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20}, @generic={0x3, 0xb, 0xc, 0x8001, 0x20004}, @call={0x85, 0x0, 0x0, 0x5a}, @call={0x85, 0x0, 0x0, 0x61}, @map_val={0x18, 0x7, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x6}, @call={0x85, 0x0, 0x0, 0x3e}]}, &(0x7f0000000200)='syzkaller\x00', 0x1f, 0x6e, &(0x7f00000002c0)=""/110, 0x6f8dc4d7db8ca5f7, 0x0, [], r5, 0x8e1d94903cc590cf, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x3, 0xa, 0x1, 0x4}, 0x10}, 0x70) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x200) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000040)=""/180) [ 1163.178726][ T26] audit: type=1804 audit(1573657094.480:952): pid=10534 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir400658008/syzkaller.KycbHe/1462/file0/file0" dev="sda1" ino=16532 res=1 [ 1163.178745][T10549] device bond350 entered promiscuous mode 14:58:14 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1163.305750][ T26] audit: type=1800 audit(1573657094.480:953): pid=10534 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="file0" dev="sda1" ino=16532 res=0 [ 1163.368106][T10549] 8021q: adding VLAN 0 to HW filter on device bond350 [ 1163.393282][ T26] audit: type=1804 audit(1573657094.480:954): pid=10536 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir400658008/syzkaller.KycbHe/1462/file0/file0" dev="sda1" ino=16532 res=1 14:58:14 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, 0x0, 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x70, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:58:14 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0x900120, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1163.418280][T10553] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1163.486973][T10564] device bond39 entered promiscuous mode [ 1163.492893][T10564] 8021q: adding VLAN 0 to HW filter on device bond39 [ 1163.564204][T10549] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1163.601685][T10553] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 14:58:15 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0x7, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:58:15 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:58:15 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x81, 0x1, 0x3f, 0x0, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0x100011, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1163.923559][T10587] device bond40 entered promiscuous mode [ 1163.976574][T10587] 8021q: adding VLAN 0 to HW filter on device bond40 [ 1164.021665][T10588] device bond351 entered promiscuous mode [ 1164.040808][T10588] 8021q: adding VLAN 0 to HW filter on device bond351 [ 1164.064871][T10590] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1164.109418][T10588] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 14:58:15 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="2e0000003500050ad25a80648c6356c10224fc0010000b400a000400030082c1b0acea8b0900018004021700d1bd", 0x2e}], 0x1}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x200) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r2) ioctl$VIDIOC_G_JPEGCOMP(r2, 0x808c563d, &(0x7f0000000180)) getsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) 14:58:15 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0x10, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:58:15 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x20, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf00}}, 0x20}}, 0x0) [ 1164.332379][ T26] audit: type=1804 audit(1573657095.710:955): pid=10572 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir923645982/syzkaller.aWZZDI/795/file0" dev="sda1" ino=16546 res=1 [ 1164.392097][T10609] device bond352 entered promiscuous mode [ 1164.415068][T10609] 8021q: adding VLAN 0 to HW filter on device bond352 [ 1164.439809][ T26] audit: type=1804 audit(1573657095.780:956): pid=10581 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir400658008/syzkaller.KycbHe/1463/file0/file0" dev="loop0" ino=798 res=1 [ 1164.457535][T10613] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 14:58:15 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, 0x0, 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x90, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1164.565745][T10609] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1164.653814][T10622] device bond41 entered promiscuous mode 14:58:16 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0x900220, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1164.728536][T10622] 8021q: adding VLAN 0 to HW filter on device bond41 [ 1164.751614][T10613] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 14:58:16 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0x18, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1164.943327][T10616] validate_nla: 39 callbacks suppressed [ 1164.943338][T10616] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 14:58:16 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_DROP_PRIVILEGES(0xffffffffffffffff, 0x4004551e, &(0x7f0000000000)) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x1000000000054}, 0x98) 14:58:16 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x81, 0x1, 0x3f, 0x0, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0x100011, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1165.057439][T10640] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 14:58:16 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f0000000080)={0x707e, 0x3, 0x7}) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="2e0000003500050ad25a80648c6356c10224fc0010000b400a000400030082c1b0acea8b0900018004021700d1bd", 0x2e}], 0x1}, 0x0) [ 1165.146662][T10640] device bond353 entered promiscuous mode [ 1165.191052][T10640] 8021q: adding VLAN 0 to HW filter on device bond353 [ 1165.310524][T10644] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1165.349652][T10657] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1165.399892][T10640] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1165.551303][ T26] audit: type=1804 audit(1573657096.930:957): pid=10627 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir923645982/syzkaller.aWZZDI/796/file0" dev="sda1" ino=17382 res=1 14:58:17 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="2e0000003500050ad25a80648c6356c10224fc0010000b400a000400030082c1b0acea8b0900018004021700d1bd", 0x2e}], 0x1}, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0) ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f0000000080)=0x2) 14:58:17 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0x25, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:58:17 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, 0x0, 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0xa0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1165.867626][T10673] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1165.900665][T10676] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1165.970554][ T26] audit: type=1804 audit(1573657097.350:958): pid=10634 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir400658008/syzkaller.KycbHe/1464/file0/file0" dev="sda1" ino=17117 res=1 [ 1166.005154][T10673] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1166.040868][T10676] device bond354 entered promiscuous mode [ 1166.074350][T10676] 8021q: adding VLAN 0 to HW filter on device bond354 14:58:17 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_DROP_PRIVILEGES(0xffffffffffffffff, 0x4004551e, &(0x7f0000000000)) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x1000000000054}, 0x98) [ 1166.093800][ T26] audit: type=1800 audit(1573657097.350:959): pid=10634 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="file0" dev="sda1" ino=17117 res=0 14:58:17 executing program 4: prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="2e0000003500050ad25a80648c6356c10224fc0010000b400a000400030082c1b0acea8b0900018004021700d1bd", 0x2e}], 0x1}, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0xd335e3fbb0936aea, 0x0) io_setup(0x3ff, &(0x7f0000000040)=0x0) socket$rds(0x15, 0x5, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000140)=[{r2, 0x480}], 0x1, 0x200) r3 = syz_open_dev$cec(&(0x7f0000000380)='/dev/cec#\x00', 0x2, 0x2) io_submit(r1, 0x2, &(0x7f0000000340)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x8000, r2, &(0x7f00000001c0)="6fc91de435378af067f6c83e592a1d8640abf39112a6891903e29297eeb2d54c3de94cd8d2986052111bfb87721a504c6a64ed189f22fef4d104167e6707d1ff45d5e4b793e0e2713cc20c3d212d5f9e2a68168f9b96cfebb81b9e7cfec3a907e0fd291d2b11515aa366a55e60be4edd9cd1178b3e19abaf1927fd4940f7b691148a6fbdb386f9ffc707841a6342c02bb47c18e902bb5bbe471f5045214f2328807a8c1a009519814e1a006827e84fbbd640935b4a1bde4c5867e7bfc151", 0xbe, 0x34, 0x0, 0x1, r0}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2, 0x3, r0, &(0x7f00000000c0)="4aad334ca4f115f791a320fb43e0c2c5d296c0ce233156c6f851bb63eb97ce06602cf74ef0fc5ad8707d1d9fd135d1fef7d539da8b15b86101cfa1a0c45b40", 0x3f, 0x20, 0x0, 0x0, r3}]) ioctl$IMSETDEVNAME(r0, 0x80184947, &(0x7f0000000180)={0x3, 'syz0\x00'}) [ 1166.204520][ T26] audit: type=1804 audit(1573657097.350:960): pid=10669 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir400658008/syzkaller.KycbHe/1464/file0/file0" dev="sda1" ino=17117 res=1 14:58:17 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xc8c, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:58:17 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0x900320, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1166.380700][T10699] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1166.413821][T10699] device bond355 entered promiscuous mode [ 1166.434823][T10699] 8021q: adding VLAN 0 to HW filter on device bond355 14:58:17 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x81, 0x1, 0x3f, 0x0, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0x100011, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:58:18 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xdd0, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1166.875153][T10718] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1166.918316][T10718] device bond356 entered promiscuous mode [ 1166.952520][T10718] 8021q: adding VLAN 0 to HW filter on device bond356 14:58:18 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, 0x0, 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0xb0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:58:18 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="2e0000003500050ad25a80648c6356c10224fc0010000b400a000400030082c1b0acea8b0900018004021700d1bd", 0x2e}], 0x1}, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x1000, 0x0) mq_getsetattr(r1, &(0x7f0000000080)={0x6, 0x3e00000000000000, 0x40, 0x6, 0x0, 0x6a30, 0x5, 0x1ff}, &(0x7f00000000c0)) r2 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x38, 0x10000) ioctl$SNDRV_CTL_IOCTL_PVERSION(r2, 0x80045500, &(0x7f0000000180)) 14:58:18 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xddc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1167.283336][T10736] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 14:58:18 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x100000000004}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000002c0)={0x0, 0x1}, 0x4) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) connect(r0, &(0x7f00000001c0)=@in={0x2, 0x4e20, @local}, 0x80) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000d7, 0x0) [ 1167.342055][T10742] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 14:58:18 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x252, &(0x7f0000001900)=[{&(0x7f00000002c0)="05c0394bee50e551a92cdf20ce03c117b559d36b0889d0de52867126ff7a42e3345543370b3cefc206f37f165609b7ac84d8eaa87265771c1b1170eb49fe306a0be91cd476c4e03b285266ff412261c42bb6706f3e82df637ec27c254625fc0d3696b931a42b26f57f92a9f4a77441400669063bb76739adeb29a26f65707663c4dd6d031d2483af5c4bfa91e59c561a7e24055c5461253898417d0abdc7528f973f82e3385579fbf343a1f39b37e22515a55a321cc1af81b192e55ddb47fb445c2cf8d7e98a6162def744b4ea"}, {&(0x7f00000003c0)="3ecdfebc79dcb4bc474ee1ba0e8fa1990c1754ae4158e13db7f57e5d603db4058c5fac7ba255e533fc8ae20e06ca038810e2d2e0ab24abb0dc9a5ec7b7f81cd43da81716e5a7326844ad057d9a9e47958f8843970dc970821d4dd3c48b9e010f63b1e29ea0029654e6ddd598bd865f7bca99672a09a1f4f5c9cbeaade59d29d820e83b1178815dc58f74da40f1c29668c3a8d35fcbc526f254d783c2adc5d84d691ffbe726a64750fb11b852b93bfb0a51557ddb7afab72876bd01e633"}, {&(0x7f0000000480)="ab22a8372a6e18ddd800db95a4c6e96c9a5484ec09c4b1449a47594959d6bae27a92306d7cf95a723b3c023f86f1ec809608ce03918b4bbd92e37919c6fd31284b7bb955b6ec5a07c518"}, {&(0x7f0000000500)="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"}, {&(0x7f0000001500)="c264364906f7cb1e26b26420a7a147c260a92897bba9df751c6b49fa1525780cbec248b28dcaee94eec53fd228bba038998782b1b567a3c7b261a0a2c1dbf43bb3a059d6ff456ef3104f8da4d33728970a9e3f35349b07db1e17ef058f48cc592e00ea563f31dc65296f9b5f48e5a2dbf306f1369dd678a77da487bf6549149e8b86c8df89157ee67b732a8a9c"}, {&(0x7f00000015c0)="e6a8cb420c4252b3719d1d8e143362b045a5018c37451f41e196a6a703b225ab713b98646518c5870b87516fb337a2f0a1bfd1a9d421ecd1743bf4effff4ef89bd25ba705d03aae8c5c1c2a5774956e1e1563a98e4fe85b3299bad137b39bf299e03f6d9e7bd96d65f69aeaf8870d0c56ed63049ef6fb136348b14ef7b48c01f1559067063a41db5d095f5527379145bc4f9786b8fe9543b3fc45e68ad077d3b85ed600ecbec0aa1969eb1668e9c670d1668b9b26f9f"}, {&(0x7f0000001680)="2f15c88cf4fdefd8a03039edf3cd41d7b2356e503e040c8021ef51ffaa5110fbf18ae79a2e887ab035e7b4649ff8e730fa706aa66bd410abf3c5352c6c48430a961db39cee860fb67b41d21c7c656ca8a0914ca05b7b792e8c9b04dcd6248210454938686a092adb4a2fde9f693ce606218bb6de39f665fe1286d9dc5f719125b3e9ac4d95b32593fce42dbcba3c231117fef8911084b42708717306aabee05df45bf6d594b6f4abf4399d29ed04ab6b415823a1a1ea68145abe71a559b7ac235195ef78c611472d627bdd8164b114ba6461fca8d2f4272d7e73066c102f17432deb26"}, {&(0x7f0000000100)}, {&(0x7f0000001780)="e4e493cb5ce8dc71264a8e6d8b21c4ffa373bddb93cebb2f92e8d1bdcf9db1ba1df622c6b110ce2f088ca85a82bf530eea3731b912f4f43cd2dd0f980164b6a8b8abfbde206e7c44ec9f0c133a463cf9e7757e5233e7ad6fcc982546a46e972da57b9d"}, {&(0x7f0000001800)="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", 0x4}], 0x1, 0x0, 0xffffffffffffff22}, 0x7b20fba62dd2f000) [ 1167.499231][T10742] device bond357 entered promiscuous mode [ 1167.572235][T10742] 8021q: adding VLAN 0 to HW filter on device bond357 [ 1167.611198][T10757] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 14:58:19 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xe2c, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:58:19 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0x900420, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:58:19 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="2e0000003500050ad25a80648c6356c10224fc0010000b400a000400030082c1b0acea8b0900018004021700d1bd", 0x2e}]}, 0x0) 14:58:19 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x7, 0x5, 0x1}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x1d00}, [@map={0x18, 0x0, 0x1, 0x0, r1}]}, &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 14:58:19 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x81, 0x1, 0x3f, 0x0, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0x100011, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1167.911394][T10763] device bond358 entered promiscuous mode [ 1167.975843][T10763] 8021q: adding VLAN 0 to HW filter on device bond358 [ 1168.209092][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 1168.209117][ T26] audit: type=1804 audit(1573657099.590:965): pid=10735 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir923645982/syzkaller.aWZZDI/798/file0" dev="sda1" ino=16657 res=1 14:58:19 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xea0, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:58:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0xffffffffffffffc2}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:58:19 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, 0x0, 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0xc0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1168.515507][T10798] device bond359 entered promiscuous mode [ 1168.559520][T10798] 8021q: adding VLAN 0 to HW filter on device bond359 [ 1168.657871][T10800] __nla_validate_parse: 12 callbacks suppressed [ 1168.657886][T10800] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1168.771457][T10798] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 14:58:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0xffffffffffffffc2}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:58:20 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0x2000, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:58:20 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x81, 0x1, 0x3f, 0x0, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0x100011, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1169.184681][ T26] audit: type=1804 audit(1573657100.560:966): pid=10784 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir400658008/syzkaller.KycbHe/1466/file0/file0" dev="sda1" ino=16689 res=1 [ 1169.249291][T10827] device bond360 entered promiscuous mode [ 1169.296377][T10827] 8021q: adding VLAN 0 to HW filter on device bond360 [ 1169.331443][ T26] audit: type=1800 audit(1573657100.560:967): pid=10784 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="file0" dev="sda1" ino=16689 res=0 [ 1169.386268][T10831] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1169.422310][ T26] audit: type=1804 audit(1573657100.560:968): pid=10814 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir400658008/syzkaller.KycbHe/1466/file0/file0" dev="sda1" ino=16689 res=1 14:58:20 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xa00020, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1169.478479][T10827] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 14:58:20 executing program 3: socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() mmap(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5, 0x0, 0x3}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000028c0)=[{{&(0x7f00000004c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x7c, 0x0, 0x0, 0x0, 0x1d7}}], 0x1, 0x20101, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20000000) write(r3, &(0x7f0000000340), 0x41395527) prctl$PR_SET_PDEATHSIG(0x1, 0x2d) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, &(0x7f0000000c00)=ANY=[], 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext, 0x8c12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = open(0x0, 0x0, 0x0) accept4$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001140)=0x14, 0x0) read$char_usb(r4, &(0x7f00000003c0)=""/140, 0x8c) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)}], 0x4, 0x0) [ 1169.556578][ T26] audit: type=1804 audit(1573657100.880:969): pid=10806 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir923645982/syzkaller.aWZZDI/799/file0" dev="sda1" ino=16993 res=1 14:58:21 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xc, 0x2, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:58:21 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, 0x0, 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0xd0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1170.071483][T10857] device bond361 entered promiscuous mode [ 1170.094937][T10857] 8021q: adding VLAN 0 to HW filter on device bond361 14:58:21 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xc, 0x3, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1170.509697][T10880] validate_nla: 7 callbacks suppressed [ 1170.509709][T10880] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 14:58:21 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x81, 0x1, 0x3f, 0x0, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0x100011, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:58:21 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = open$dir(0x0, 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) ptrace$poke(0x5, r1, 0x0, 0x0) [ 1170.592939][T10880] device bond362 entered promiscuous mode [ 1170.621333][ T26] audit: type=1804 audit(1573657102.000:970): pid=10861 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir400658008/syzkaller.KycbHe/1467/file0/file0" dev="sda1" ino=17153 res=1 [ 1170.674340][T10880] 8021q: adding VLAN 0 to HW filter on device bond362 [ 1170.780602][ T26] audit: type=1804 audit(1573657102.030:971): pid=10865 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir400658008/syzkaller.KycbHe/1467/file0/file0" dev="sda1" ino=17153 res=1 14:58:22 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xc, 0x4, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1171.123253][T10908] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 14:58:22 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0x900220, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1171.171561][ T26] audit: type=1804 audit(1573657102.550:972): pid=10873 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir923645982/syzkaller.aWZZDI/800/file0" dev="sda1" ino=17009 res=1 [ 1171.208394][T10908] device bond363 entered promiscuous mode 14:58:22 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xa00120, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1171.244953][T10908] 8021q: adding VLAN 0 to HW filter on device bond363 [ 1171.278275][T10910] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 1171.373798][T10908] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 14:58:22 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, 0x0, 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0xe0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:58:23 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xc, 0x8, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:58:23 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x81, 0x1, 0x3f, 0x0, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={0x0, 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0x100011, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1171.883060][T10934] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1172.019988][T10934] device bond364 entered promiscuous mode [ 1172.052036][T10934] 8021q: adding VLAN 0 to HW filter on device bond364 14:58:23 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xc, 0x10, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:58:23 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xa00020, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1172.355813][T10954] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1172.384530][ T26] audit: type=1804 audit(1573657103.760:973): pid=10945 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir400658008/syzkaller.KycbHe/1468/file0/file0" dev="loop0" ino=802 res=1 [ 1172.458484][T10954] device bond365 entered promiscuous mode [ 1172.504978][T10954] 8021q: adding VLAN 0 to HW filter on device bond365 [ 1172.513305][T10956] netlink: 'syz-executor.5': attribute type 16 has an invalid length. [ 1172.524660][ T26] audit: type=1804 audit(1573657103.840:974): pid=10952 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir400658008/syzkaller.KycbHe/1468/file0/file0" dev="loop0" ino=802 res=1 [ 1172.577797][T10954] netlink: 'syz-executor.5': attribute type 16 has an invalid length. [ 1172.594308][T10956] netlink: 'syz-executor.5': attribute type 16 has an invalid length. 14:58:24 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xc, 0x33, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:58:24 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xa00220, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1172.771638][T10976] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 14:58:24 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, 0x0, 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0xf0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1172.855211][T10976] device bond366 entered promiscuous mode [ 1172.902818][T10976] 8021q: adding VLAN 0 to HW filter on device bond366 14:58:24 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xc, 0x118, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:58:24 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x81, 0x1, 0x3f, 0x0, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={0x0, 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0x100011, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1173.364977][T10998] device bond367 entered promiscuous mode [ 1173.406293][T10998] 8021q: adding VLAN 0 to HW filter on device bond367 14:58:25 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xc, 0x300, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:58:25 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, 0x0, 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0xe0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1173.779369][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 1173.779387][ T26] audit: type=1804 audit(1573657105.160:977): pid=10988 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir923645982/syzkaller.aWZZDI/802/file0" dev="sda1" ino=17281 res=1 [ 1173.867890][T11013] device bond368 entered promiscuous mode [ 1173.904950][T11013] 8021q: adding VLAN 0 to HW filter on device bond368 [ 1173.933643][ T26] audit: type=1804 audit(1573657105.310:978): pid=11016 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir400658008/syzkaller.KycbHe/1469/file0/file0" dev="sda1" ino=17386 res=1 14:58:25 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, 0x0, 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x300, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:58:25 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="2e0000003500050ad25a80648c6356c10224fc0010000b400a000400030082c1b0acea8b0900018004021700d1bd", 0x2e}], 0x1}, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000040)=0x8) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x40, 0x0) r2 = memfd_create(&(0x7f00006a7000)='/dev/vga_arbiter\x00', 0x0) r3 = syz_open_procfs(0x0, &(0x7f00008feff8)='net/udp\x00') pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r4) sendfile(r2, r4, 0x0, 0x1) ioctl$SG_EMULATED_HOST(r3, 0x2203, &(0x7f0000000000)) ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, &(0x7f0000000000)=0x0) ioctl$VIDIOC_S_STD(r3, 0x40085618, &(0x7f00000001c0)=r5) ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f00000000c0)=r5) write$P9_RLOCK(r1, &(0x7f0000000140)={0x8, 0x35, 0x1, 0x1}, 0x8) [ 1174.118187][ T26] audit: type=1800 audit(1573657105.310:979): pid=11016 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="file0" dev="sda1" ino=17386 res=0 14:58:25 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xc, 0x324, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1174.197361][ T26] audit: type=1804 audit(1573657105.310:980): pid=11018 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir400658008/syzkaller.KycbHe/1469/file0/file0" dev="sda1" ino=17386 res=1 14:58:25 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xa00320, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:58:25 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r1) getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x8) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000140)=[{r2}], 0x1, 0x200) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000140), &(0x7f0000000180)=0x4) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="2e0000003500050ad25a80648c6356c10224fc0010000b400a000400030082c1b0acea8b0900018004021700d1bd", 0x2e}], 0x1}, 0x0) [ 1174.454376][T11038] device bond369 entered promiscuous mode [ 1174.489012][T11038] 8021q: adding VLAN 0 to HW filter on device bond369 14:58:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xc, 0x336, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:58:26 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x81, 0x1, 0x3f, 0x0, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={0x0, 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0x100011, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1175.028915][T11070] device bond370 entered promiscuous mode [ 1175.038239][ T26] audit: type=1804 audit(1573657106.420:981): pid=11033 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir923645982/syzkaller.aWZZDI/803/file0" dev="sda1" ino=16625 res=1 [ 1175.044858][T11070] 8021q: adding VLAN 0 to HW filter on device bond370 14:58:26 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r4) ioctl$KDSKBMODE(r4, 0x4b45, &(0x7f0000000080)=0xfffffffffffffde7) poll(&(0x7f0000000140)=[{r3}], 0x1, 0x200) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x4000}, {r3, 0x140}, {r3, 0x26}, {r2, 0x630}], 0x1fffff8b, 0x220) fcntl$dupfd(r1, 0x0, r0) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="2e0000003500050ad25a80648c6356c10224fc0010000b400a000400030082c1b0acea8b0900018004021700d1bd", 0x2e}], 0x1}, 0x0) 14:58:26 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, 0x0, 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x408, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:58:26 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xa00120, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:58:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xc, 0x339, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1175.626245][T11100] validate_nla: 13 callbacks suppressed [ 1175.626256][T11100] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1175.735487][ T26] audit: type=1804 audit(1573657107.120:982): pid=11093 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir400658008/syzkaller.KycbHe/1470/file0/file0" dev="sda1" ino=16641 res=1 [ 1175.748030][T11100] device bond371 entered promiscuous mode [ 1175.800103][T11100] 8021q: adding VLAN 0 to HW filter on device bond371 [ 1175.840430][ T26] audit: type=1800 audit(1573657107.120:983): pid=11093 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="file0" dev="sda1" ino=16641 res=0 14:58:27 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xc, 0x2000, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:58:27 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x5, 0x20400) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)=[0x2, 0x9]) r1 = socket$kcm(0x10, 0x25292a1b5d0aee4a, 0x10) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/llc\x00') sendmsg$kcm(r1, &(0x7f0000000280)={0x0, 0x15, &(0x7f0000000000)=[{&(0x7f0000000140)="2e0006003400050ad25a80648c6356c10224fc0010000b400a000400030082c1b0acea8b0900018004020301000000000000e3c69109031ed99902d831f7b80c2c643a1fd0ff7e7df8adad285bed88653c98393c9afbeaa856e60d58d43df9872b11c48abd2d3fb5476d60a66cdc4ca6f8160b267639ac", 0x2e}], 0x10000000000002d4, 0x0, 0xffffffffffffff74}, 0x40000) ioctl$RTC_VL_READ(r2, 0x80047013, &(0x7f0000000100)) [ 1175.909134][ T26] audit: type=1804 audit(1573657107.120:984): pid=11095 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir400658008/syzkaller.KycbHe/1470/file0/file0" dev="sda1" ino=16641 res=1 14:58:27 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x81, 0x1, 0x3f, 0x0, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140)}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0x100011, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:58:27 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xa00420, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1176.026379][T11115] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1176.141434][T11115] device bond372 entered promiscuous mode [ 1176.176389][T11115] 8021q: adding VLAN 0 to HW filter on device bond372 14:58:27 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="2e0000003500050ad25a80648c6356c10224fc0010000b400a000400030082c1b0acea8b0900018004021700d1bd", 0x2e}], 0x1}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r1) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)) [ 1176.211650][ T26] audit: type=1804 audit(1573657107.590:985): pid=11089 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir923645982/syzkaller.aWZZDI/804/file0" dev="sda1" ino=17281 res=1 14:58:27 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1176.399804][T11135] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1176.443751][T11135] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1176.528038][T11146] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1176.633444][T11146] device bond373 entered promiscuous mode [ 1176.656935][T11146] 8021q: adding VLAN 0 to HW filter on device bond373 14:58:28 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, 0x0, 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x500, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:58:28 executing program 4: socket$kcm(0x10, 0x5, 0x10) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x82aef163d4dea712, 0x0) sendmsg$kcm(r0, &(0x7f0000000080), 0x200040d0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r1) ioctl$sock_SIOCSIFBR(r1, 0x8941, 0xfffffffffffffffd) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r2) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000140)=[{r4}], 0x1, 0x200) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000002, 0x30, r3, 0x9ff5b000) setsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000000)=0x2, 0x4) r5 = syz_open_dev$vcsa(&(0x7f0000000240)='/dev/vcsa#\x00', 0x3, 0x0) r6 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0) close(r6) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r6, 0x84, 0x6c, &(0x7f0000000880)=ANY=[@ANYRES32=r8, @ANYBLOB="1c000000f8c36c79fe2a279a6b438a38333276d76dc9c5b5e9f9feffffff2b39"], &(0x7f0000000900)=0x24) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, &(0x7f0000000280)={r8, 0x800}, 0x8) r9 = openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x30001, 0x0) splice(0xffffffffffffffff, &(0x7f0000000100)=0xffffffffffffffe1, r9, &(0x7f0000000200)=0xff, 0xfffffffffffffffb, 0x6) openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nunl\x00', 0xc000, 0x0) 14:58:28 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x2]}]}, 0x2c}}, 0x0) 14:58:28 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xa00320, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1177.033412][T11165] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1177.129301][T11165] device bond374 entered promiscuous mode [ 1177.149886][T11165] 8021q: adding VLAN 0 to HW filter on device bond374 14:58:28 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x3]}]}, 0x2c}}, 0x0) 14:58:28 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r0) fdatasync(r0) r1 = socket$kcm(0x10, 0x6, 0x10) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="2e0090003500050ad25a80648c6356c10224140010000b400a000459bb5d35ae558d888b0900018004021700d1bd", 0x2e}], 0x53}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r2) getsockname$tipc(r2, &(0x7f0000000040)=@name, &(0x7f0000000080)=0x10) [ 1177.413641][ T26] audit: type=1804 audit(1573657108.790:986): pid=11170 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir400658008/syzkaller.KycbHe/1471/file0/file0" dev="sda1" ino=17089 res=1 14:58:28 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x81, 0x1, 0x3f, 0x0, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140)}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0x100011, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1177.540943][T11188] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1177.677261][T11188] device bond375 entered promiscuous mode [ 1177.694297][T11188] 8021q: adding VLAN 0 to HW filter on device bond375 14:58:29 executing program 4: socket$kcm(0x10, 0x5, 0x10) 14:58:29 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xb00020, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:58:29 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x4]}]}, 0x2c}}, 0x0) 14:58:29 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, 0x0, 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x600, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:58:29 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, 0x0, 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x90, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1178.030180][T11216] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1178.117956][T11216] device bond376 entered promiscuous mode [ 1178.141510][T11216] 8021q: adding VLAN 0 to HW filter on device bond376 14:58:29 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0x18, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:58:29 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x6]}]}, 0x2c}}, 0x0) [ 1178.442437][T11239] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1178.478666][T11239] device bond377 entered promiscuous mode [ 1178.511737][T11239] 8021q: adding VLAN 0 to HW filter on device bond377 14:58:30 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0xa]}]}, 0x2c}}, 0x0) [ 1178.752755][T11248] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1178.898271][T11248] device bond42 entered promiscuous mode [ 1178.904233][T11248] 8021q: adding VLAN 0 to HW filter on device bond42 14:58:30 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x81, 0x1, 0x3f, 0x0, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140)}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0x100011, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1178.949487][T11250] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1178.966688][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 1178.966788][ T26] audit: type=1804 audit(1573657110.350:990): pid=11233 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir923645982/syzkaller.aWZZDI/806/file0" dev="sda1" ino=17395 res=1 [ 1179.041368][ T26] audit: type=1800 audit(1573657110.350:991): pid=11233 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="file0" dev="sda1" ino=17395 res=0 [ 1179.078245][T11260] device bond378 entered promiscuous mode [ 1179.084189][T11260] 8021q: adding VLAN 0 to HW filter on device bond378 14:58:30 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x81, 0x1, 0x3f, 0x0, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0x100011, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1179.134754][ T26] audit: type=1804 audit(1573657110.350:992): pid=11237 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir923645982/syzkaller.aWZZDI/806/file0" dev="sda1" ino=17395 res=1 14:58:30 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000140)=[{r2}], 0x1, 0x200) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000240)={@loopback, @local, 0x0}, &(0x7f00000003c0)=0xc) connect$can_bcm(r2, &(0x7f0000000400)={0x1d, r3}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r5 = socket(0x400000000000010, 0x802, 0x0) write(r5, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) ioctl$SIOCX25SDTEFACILITIES(r1, 0x89eb, &(0x7f0000000440)={0x101, 0x101, 0x3, 0x5, 0x5, 0xb, 0xc, "eca67752c74d4bc866dd52c11d080465f3e54bb7", "62b3cb4043cffeb8b06b5891ebd58767bc5ccc03"}) setsockopt$sock_linger(r4, 0x1, 0x2f, &(0x7f0000000100), 0x8) r6 = socket$kcm(0x10, 0x2, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000140)=[{r7}], 0x1, 0x200) syz_mount_image$exfat(&(0x7f00000001c0)='exfat\x00', &(0x7f0000000200)='./file0\x00', 0x101, 0x0, &(0x7f0000000240), 0x2000, &(0x7f00000002c0)={[{@iocharset={'iocharset', 0x3d, 'cp775'}}, {@namecase='namecase=1'}, {@utf8='utf8'}, {@umask={'umask', 0x3d, 0x4}}, {@dmask={'dmask', 0x3d, 0x1000}}, {@uid={'uid', 0x3d, 0xee01}}, {@errors_remount='errors=remount-ro'}, {@fmask={'fmask', 0x3d, 0x7}}], [{@appraise='appraise'}, {@smackfshat={'smackfshat', 0x3d, '-:md5sum,nodev'}}, {@hash='hash'}, {@permit_directio='permit_directio'}]}) sendmsg$can_j1939(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)="7183ad986e9d18833dada9217378dab9ab0e28650880e91291e1816f7b491f8640e2ba0e1da157b7a2ccd2a4eb9777d970f4b9c0cce12ae4bbc8569da932ef301b77e28be39e212615787ba2171d59c6c20789d47a2432543bed288348d95286170e9fea13286a862d671248372d17a57923cca8cebded3c46a2a2ed8a2811eac2280bba921adca3a0d1f3281d036ce749c533", 0x93}, 0x1, 0x0, 0x0, 0x90}, 0x4) sendmsg$kcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="2e0000003500050ad25a80648c6356c10224fc0010000b400a000400030082c1b0acea8b0900018004021700d1bd", 0x2e}], 0x1}, 0x0) r8 = inotify_init() ioctl$void(r8, 0x5451) 14:58:30 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0xc]}]}, 0x2c}}, 0x0) 14:58:30 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xb00120, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:58:30 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, 0x0, 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x700, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1179.645129][T11283] device bond379 entered promiscuous mode [ 1179.695428][T11283] 8021q: adding VLAN 0 to HW filter on device bond379 14:58:31 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0xe]}]}, 0x2c}}, 0x0) [ 1180.173626][T11319] device bond380 entered promiscuous mode [ 1180.199858][T11319] 8021q: adding VLAN 0 to HW filter on device bond380 14:58:31 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x81, 0x1, 0x3f, 0x0, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x0, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0x100011, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:58:31 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000140)=[{r2}], 0x1, 0x200) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000240)={@loopback, @local, 0x0}, &(0x7f00000003c0)=0xc) connect$can_bcm(r2, &(0x7f0000000400)={0x1d, r3}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r5 = socket(0x400000000000010, 0x802, 0x0) write(r5, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) ioctl$SIOCX25SDTEFACILITIES(r1, 0x89eb, &(0x7f0000000440)={0x101, 0x101, 0x3, 0x5, 0x5, 0xb, 0xc, "eca67752c74d4bc866dd52c11d080465f3e54bb7", "62b3cb4043cffeb8b06b5891ebd58767bc5ccc03"}) setsockopt$sock_linger(r4, 0x1, 0x2f, &(0x7f0000000100), 0x8) r6 = socket$kcm(0x10, 0x2, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000140)=[{r7}], 0x1, 0x200) syz_mount_image$exfat(&(0x7f00000001c0)='exfat\x00', &(0x7f0000000200)='./file0\x00', 0x101, 0x0, &(0x7f0000000240), 0x2000, &(0x7f00000002c0)={[{@iocharset={'iocharset', 0x3d, 'cp775'}}, {@namecase='namecase=1'}, {@utf8='utf8'}, {@umask={'umask', 0x3d, 0x4}}, {@dmask={'dmask', 0x3d, 0x1000}}, {@uid={'uid', 0x3d, 0xee01}}, {@errors_remount='errors=remount-ro'}, {@fmask={'fmask', 0x3d, 0x7}}], [{@appraise='appraise'}, {@smackfshat={'smackfshat', 0x3d, '-:md5sum,nodev'}}, {@hash='hash'}, {@permit_directio='permit_directio'}]}) sendmsg$can_j1939(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)="7183ad986e9d18833dada9217378dab9ab0e28650880e91291e1816f7b491f8640e2ba0e1da157b7a2ccd2a4eb9777d970f4b9c0cce12ae4bbc8569da932ef301b77e28be39e212615787ba2171d59c6c20789d47a2432543bed288348d95286170e9fea13286a862d671248372d17a57923cca8cebded3c46a2a2ed8a2811eac2280bba921adca3a0d1f3281d036ce749c533", 0x93}, 0x1, 0x0, 0x0, 0x90}, 0x4) sendmsg$kcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="2e0000003500050ad25a80648c6356c10224fc0010000b400a000400030082c1b0acea8b0900018004021700d1bd", 0x2e}], 0x1}, 0x0) r8 = inotify_init() ioctl$void(r8, 0x5451) 14:58:31 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0xf]}]}, 0x2c}}, 0x0) [ 1180.454864][ T26] audit: type=1804 audit(1573657111.840:993): pid=11297 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir923645982/syzkaller.aWZZDI/807/file0" dev="sda1" ino=17410 res=1 14:58:32 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x81, 0x1, 0x3f, 0x0, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0x100011, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1180.592687][ T26] audit: type=1804 audit(1573657111.970:994): pid=11308 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir400658008/syzkaller.KycbHe/1473/file0" dev="sda1" ino=17411 res=1 14:58:32 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, 0x0, 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x804, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1180.654958][T11342] validate_nla: 4 callbacks suppressed [ 1180.654967][T11342] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1180.673172][ T26] audit: type=1800 audit(1573657112.000:995): pid=11308 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="file0" dev="sda1" ino=17411 res=0 [ 1180.702330][ T26] audit: type=1804 audit(1573657112.000:996): pid=11329 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir400658008/syzkaller.KycbHe/1473/file0" dev="sda1" ino=17411 res=1 [ 1180.735696][T11342] device bond381 entered promiscuous mode [ 1180.743147][T11342] 8021q: adding VLAN 0 to HW filter on device bond381 14:58:32 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x10]}]}, 0x2c}}, 0x0) 14:58:32 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xb00220, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1180.994337][T11362] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1181.013266][T11365] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1181.122847][T11362] device bond382 entered promiscuous mode [ 1181.179084][T11362] 8021q: adding VLAN 0 to HW filter on device bond382 14:58:32 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x60]}]}, 0x2c}}, 0x0) 14:58:32 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000140)=[{r2}], 0x1, 0x200) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000240)={@loopback, @local, 0x0}, &(0x7f00000003c0)=0xc) connect$can_bcm(r2, &(0x7f0000000400)={0x1d, r3}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r5 = socket(0x400000000000010, 0x802, 0x0) write(r5, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) ioctl$SIOCX25SDTEFACILITIES(r1, 0x89eb, &(0x7f0000000440)={0x101, 0x101, 0x3, 0x5, 0x5, 0xb, 0xc, "eca67752c74d4bc866dd52c11d080465f3e54bb7", "62b3cb4043cffeb8b06b5891ebd58767bc5ccc03"}) setsockopt$sock_linger(r4, 0x1, 0x2f, &(0x7f0000000100), 0x8) r6 = socket$kcm(0x10, 0x2, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000140)=[{r7}], 0x1, 0x200) syz_mount_image$exfat(&(0x7f00000001c0)='exfat\x00', &(0x7f0000000200)='./file0\x00', 0x101, 0x0, &(0x7f0000000240), 0x2000, &(0x7f00000002c0)={[{@iocharset={'iocharset', 0x3d, 'cp775'}}, {@namecase='namecase=1'}, {@utf8='utf8'}, {@umask={'umask', 0x3d, 0x4}}, {@dmask={'dmask', 0x3d, 0x1000}}, {@uid={'uid', 0x3d, 0xee01}}, {@errors_remount='errors=remount-ro'}, {@fmask={'fmask', 0x3d, 0x7}}], [{@appraise='appraise'}, {@smackfshat={'smackfshat', 0x3d, '-:md5sum,nodev'}}, {@hash='hash'}, {@permit_directio='permit_directio'}]}) sendmsg$can_j1939(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)="7183ad986e9d18833dada9217378dab9ab0e28650880e91291e1816f7b491f8640e2ba0e1da157b7a2ccd2a4eb9777d970f4b9c0cce12ae4bbc8569da932ef301b77e28be39e212615787ba2171d59c6c20789d47a2432543bed288348d95286170e9fea13286a862d671248372d17a57923cca8cebded3c46a2a2ed8a2811eac2280bba921adca3a0d1f3281d036ce749c533", 0x93}, 0x1, 0x0, 0x0, 0x90}, 0x4) sendmsg$kcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="2e0000003500050ad25a80648c6356c10224fc0010000b400a000400030082c1b0acea8b0900018004021700d1bd", 0x2e}], 0x1}, 0x0) r8 = inotify_init() ioctl$void(r8, 0x5451) 14:58:32 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x81, 0x1, 0x3f, 0x0, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x0, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0x100011, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1181.650401][T11389] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1181.677918][ T26] audit: type=1804 audit(1573657113.060:997): pid=11364 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir923645982/syzkaller.aWZZDI/808/file0" dev="sda1" ino=17089 res=1 [ 1181.813804][T11389] device bond383 entered promiscuous mode [ 1181.850879][T11389] 8021q: adding VLAN 0 to HW filter on device bond383 14:58:33 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0, 0x0]}]}, 0x2c}}, 0x0) [ 1181.988492][T11407] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 14:58:33 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, 0x0, 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x900, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:58:33 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0xfcffffff}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1182.257507][ T26] audit: type=1804 audit(1573657113.640:998): pid=11379 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir400658008/syzkaller.KycbHe/1474/file0/file0" dev="sda1" ino=17424 res=1 [ 1182.289148][T11423] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1182.299751][ T26] audit: type=1800 audit(1573657113.670:999): pid=11379 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="file0" dev="sda1" ino=17424 res=0 [ 1182.349315][T11423] device bond384 entered promiscuous mode [ 1182.355642][T11423] 8021q: adding VLAN 0 to HW filter on device bond384 14:58:33 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000140)=[{r2}], 0x1, 0x200) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000240)={@loopback, @local, 0x0}, &(0x7f00000003c0)=0xc) connect$can_bcm(r2, &(0x7f0000000400)={0x1d, r3}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r5 = socket(0x400000000000010, 0x802, 0x0) write(r5, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) ioctl$SIOCX25SDTEFACILITIES(r1, 0x89eb, &(0x7f0000000440)={0x101, 0x101, 0x3, 0x5, 0x5, 0xb, 0xc, "eca67752c74d4bc866dd52c11d080465f3e54bb7", "62b3cb4043cffeb8b06b5891ebd58767bc5ccc03"}) setsockopt$sock_linger(r4, 0x1, 0x2f, &(0x7f0000000100), 0x8) r6 = socket$kcm(0x10, 0x2, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000140)=[{r7}], 0x1, 0x200) syz_mount_image$exfat(&(0x7f00000001c0)='exfat\x00', &(0x7f0000000200)='./file0\x00', 0x101, 0x0, &(0x7f0000000240), 0x2000, &(0x7f00000002c0)={[{@iocharset={'iocharset', 0x3d, 'cp775'}}, {@namecase='namecase=1'}, {@utf8='utf8'}, {@umask={'umask', 0x3d, 0x4}}, {@dmask={'dmask', 0x3d, 0x1000}}, {@uid={'uid', 0x3d, 0xee01}}, {@errors_remount='errors=remount-ro'}, {@fmask={'fmask', 0x3d, 0x7}}], [{@appraise='appraise'}, {@smackfshat={'smackfshat', 0x3d, '-:md5sum,nodev'}}, {@hash='hash'}, {@permit_directio='permit_directio'}]}) sendmsg$can_j1939(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)="7183ad986e9d18833dada9217378dab9ab0e28650880e91291e1816f7b491f8640e2ba0e1da157b7a2ccd2a4eb9777d970f4b9c0cce12ae4bbc8569da932ef301b77e28be39e212615787ba2171d59c6c20789d47a2432543bed288348d95286170e9fea13286a862d671248372d17a57923cca8cebded3c46a2a2ed8a2811eac2280bba921adca3a0d1f3281d036ce749c533", 0x93}, 0x1, 0x0, 0x0, 0x90}, 0x4) sendmsg$kcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="2e0000003500050ad25a80648c6356c10224fc0010000b400a000400030082c1b0acea8b0900018004021700d1bd", 0x2e}], 0x1}, 0x0) inotify_init() 14:58:33 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0, 0xff, 0x0]}]}, 0x2c}}, 0x0) [ 1182.537165][T11436] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 14:58:34 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xb00320, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1182.630852][T11436] device bond43 entered promiscuous mode [ 1182.664292][T11436] 8021q: adding VLAN 0 to HW filter on device bond43 [ 1182.693067][T11438] device bond43 left promiscuous mode 14:58:34 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x81, 0x1, 0x3f, 0x0, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x0, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0x100011, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1182.879219][T11444] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1182.921151][T11443] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1182.971804][T11444] device bond385 entered promiscuous mode [ 1183.001433][T11444] 8021q: adding VLAN 0 to HW filter on device bond385 14:58:34 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0xfcffffff}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:58:34 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0, 0xff, 0xff, 0x0]}]}, 0x2c}}, 0x0) 14:58:34 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, 0x0, 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0xa00, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1183.356317][T11478] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 14:58:34 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000140)=[{r2}], 0x1, 0x200) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000240)={@loopback, @local, 0x0}, &(0x7f00000003c0)=0xc) connect$can_bcm(r2, &(0x7f0000000400)={0x1d, r3}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r5 = socket(0x400000000000010, 0x802, 0x0) write(r5, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) ioctl$SIOCX25SDTEFACILITIES(r1, 0x89eb, &(0x7f0000000440)={0x101, 0x101, 0x3, 0x5, 0x5, 0xb, 0xc, "eca67752c74d4bc866dd52c11d080465f3e54bb7", "62b3cb4043cffeb8b06b5891ebd58767bc5ccc03"}) setsockopt$sock_linger(r4, 0x1, 0x2f, &(0x7f0000000100), 0x8) r6 = socket$kcm(0x10, 0x2, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000140)=[{r7}], 0x1, 0x200) syz_mount_image$exfat(&(0x7f00000001c0)='exfat\x00', &(0x7f0000000200)='./file0\x00', 0x101, 0x0, &(0x7f0000000240), 0x2000, &(0x7f00000002c0)={[{@iocharset={'iocharset', 0x3d, 'cp775'}}, {@namecase='namecase=1'}, {@utf8='utf8'}, {@umask={'umask', 0x3d, 0x4}}, {@dmask={'dmask', 0x3d, 0x1000}}, {@uid={'uid', 0x3d, 0xee01}}, {@errors_remount='errors=remount-ro'}, {@fmask={'fmask', 0x3d, 0x7}}], [{@appraise='appraise'}, {@smackfshat={'smackfshat', 0x3d, '-:md5sum,nodev'}}, {@hash='hash'}, {@permit_directio='permit_directio'}]}) sendmsg$can_j1939(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)="7183ad986e9d18833dada9217378dab9ab0e28650880e91291e1816f7b491f8640e2ba0e1da157b7a2ccd2a4eb9777d970f4b9c0cce12ae4bbc8569da932ef301b77e28be39e212615787ba2171d59c6c20789d47a2432543bed288348d95286170e9fea13286a862d671248372d17a57923cca8cebded3c46a2a2ed8a2811eac2280bba921adca3a0d1f3281d036ce749c533", 0x93}, 0x1, 0x0, 0x0, 0x90}, 0x4) sendmsg$kcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="2e0000003500050ad25a80648c6356c10224fc0010000b400a000400030082c1b0acea8b0900018004021700d1bd", 0x2e}], 0x1}, 0x0) inotify_init() [ 1183.409966][T11478] device bond44 entered promiscuous mode [ 1183.444458][T11478] 8021q: adding VLAN 0 to HW filter on device bond44 [ 1183.536639][T11480] device bond386 entered promiscuous mode [ 1183.554800][T11480] 8021q: adding VLAN 0 to HW filter on device bond386 [ 1183.576990][T11482] device bond44 left promiscuous mode 14:58:35 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0xfcffffff}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:58:35 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0, 0xff, 0xff, 0xff, 0x0]}]}, 0x2c}}, 0x0) 14:58:35 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xb00420, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1183.986528][T11508] device bond45 entered promiscuous mode [ 1183.999003][T11508] 8021q: adding VLAN 0 to HW filter on device bond45 14:58:35 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x81, 0x1, 0x3f, 0x0, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x0, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0x100011, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1184.088712][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 1184.088729][ T26] audit: type=1804 audit(1573657115.470:1004): pid=11489 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir923645982/syzkaller.aWZZDI/810/file0" dev="sda1" ino=16523 res=1 [ 1184.148304][T11511] device bond387 entered promiscuous mode [ 1184.159919][T11511] 8021q: adding VLAN 0 to HW filter on device bond387 [ 1184.182729][T11512] device bond45 left promiscuous mode 14:58:35 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000140)=[{r2}], 0x1, 0x200) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000240)={@loopback, @local, 0x0}, &(0x7f00000003c0)=0xc) connect$can_bcm(r2, &(0x7f0000000400)={0x1d, r3}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r5 = socket(0x400000000000010, 0x802, 0x0) write(r5, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) ioctl$SIOCX25SDTEFACILITIES(r1, 0x89eb, &(0x7f0000000440)={0x101, 0x101, 0x3, 0x5, 0x5, 0xb, 0xc, "eca67752c74d4bc866dd52c11d080465f3e54bb7", "62b3cb4043cffeb8b06b5891ebd58767bc5ccc03"}) setsockopt$sock_linger(r4, 0x1, 0x2f, &(0x7f0000000100), 0x8) r6 = socket$kcm(0x10, 0x2, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000140)=[{r7}], 0x1, 0x200) syz_mount_image$exfat(&(0x7f00000001c0)='exfat\x00', &(0x7f0000000200)='./file0\x00', 0x101, 0x0, &(0x7f0000000240), 0x2000, &(0x7f00000002c0)={[{@iocharset={'iocharset', 0x3d, 'cp775'}}, {@namecase='namecase=1'}, {@utf8='utf8'}, {@umask={'umask', 0x3d, 0x4}}, {@dmask={'dmask', 0x3d, 0x1000}}, {@uid={'uid', 0x3d, 0xee01}}, {@errors_remount='errors=remount-ro'}, {@fmask={'fmask', 0x3d, 0x7}}], [{@appraise='appraise'}, {@smackfshat={'smackfshat', 0x3d, '-:md5sum,nodev'}}, {@hash='hash'}, {@permit_directio='permit_directio'}]}) sendmsg$can_j1939(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)="7183ad986e9d18833dada9217378dab9ab0e28650880e91291e1816f7b491f8640e2ba0e1da157b7a2ccd2a4eb9777d970f4b9c0cce12ae4bbc8569da932ef301b77e28be39e212615787ba2171d59c6c20789d47a2432543bed288348d95286170e9fea13286a862d671248372d17a57923cca8cebded3c46a2a2ed8a2811eac2280bba921adca3a0d1f3281d036ce749c533", 0x93}, 0x1, 0x0, 0x0, 0x90}, 0x4) sendmsg$kcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="2e0000003500050ad25a80648c6356c10224fc0010000b400a000400030082c1b0acea8b0900018004021700d1bd", 0x2e}], 0x1}, 0x0) 14:58:35 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, 0x0, 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0xb00, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:58:35 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0, 0xff, 0xff, 0xff, 0xff, 0x0]}]}, 0x2c}}, 0x0) 14:58:36 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xfcffffff}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1184.773749][T11541] device bond388 entered promiscuous mode [ 1184.821201][T11541] 8021q: adding VLAN 0 to HW filter on device bond388 14:58:36 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xfcffffff}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:58:36 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0xf}}, 0x0) [ 1185.099670][ T26] audit: type=1804 audit(1573657116.480:1005): pid=11523 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir400658008/syzkaller.KycbHe/1476/file0/file0" dev="sda1" ino=17438 res=1 [ 1185.180485][ T26] audit: type=1800 audit(1573657116.480:1006): pid=11523 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="file0" dev="sda1" ino=17438 res=0 14:58:36 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xfcffffff}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1185.247903][ T26] audit: type=1804 audit(1573657116.480:1007): pid=11558 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir400658008/syzkaller.KycbHe/1476/file0/file0" dev="sda1" ino=17438 res=1 [ 1185.310226][T11571] device bond389 entered promiscuous mode [ 1185.348693][T11571] 8021q: adding VLAN 0 to HW filter on device bond389 14:58:36 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x81, 0x1, 0x3f, 0x0, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x0, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0x100011, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:58:36 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00020, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:58:36 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000140)=[{r2}], 0x1, 0x200) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000240)={@loopback, @local, 0x0}, &(0x7f00000003c0)=0xc) connect$can_bcm(r2, &(0x7f0000000400)={0x1d, r3}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r5 = socket(0x400000000000010, 0x802, 0x0) write(r5, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) ioctl$SIOCX25SDTEFACILITIES(r1, 0x89eb, &(0x7f0000000440)={0x101, 0x101, 0x3, 0x5, 0x5, 0xb, 0xc, "eca67752c74d4bc866dd52c11d080465f3e54bb7", "62b3cb4043cffeb8b06b5891ebd58767bc5ccc03"}) setsockopt$sock_linger(r4, 0x1, 0x2f, &(0x7f0000000100), 0x8) socket$kcm(0x10, 0x2, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000140)=[{r6}], 0x1, 0x200) syz_mount_image$exfat(&(0x7f00000001c0)='exfat\x00', &(0x7f0000000200)='./file0\x00', 0x101, 0x0, &(0x7f0000000240), 0x2000, &(0x7f00000002c0)={[{@iocharset={'iocharset', 0x3d, 'cp775'}}, {@namecase='namecase=1'}, {@utf8='utf8'}, {@umask={'umask', 0x3d, 0x4}}, {@dmask={'dmask', 0x3d, 0x1000}}, {@uid={'uid', 0x3d, 0xee01}}, {@errors_remount='errors=remount-ro'}, {@fmask={'fmask', 0x3d, 0x7}}], [{@appraise='appraise'}, {@smackfshat={'smackfshat', 0x3d, '-:md5sum,nodev'}}, {@hash='hash'}, {@permit_directio='permit_directio'}]}) sendmsg$can_j1939(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)="7183ad986e9d18833dada9217378dab9ab0e28650880e91291e1816f7b491f8640e2ba0e1da157b7a2ccd2a4eb9777d970f4b9c0cce12ae4bbc8569da932ef301b77e28be39e212615787ba2171d59c6c20789d47a2432543bed288348d95286170e9fea13286a862d671248372d17a57923cca8cebded3c46a2a2ed8a2811eac2280bba921adca3a0d1f3281d036ce749c533", 0x93}, 0x1, 0x0, 0x0, 0x90}, 0x4) 14:58:36 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfcffffff}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:58:36 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x10}}, 0x0) [ 1185.736198][ T26] audit: type=1804 audit(1573657117.120:1008): pid=11547 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir923645982/syzkaller.aWZZDI/811/file0" dev="sda1" ino=17446 res=1 [ 1185.764488][T11590] device bond390 entered promiscuous mode [ 1185.778799][T11590] 8021q: adding VLAN 0 to HW filter on device bond390 [ 1185.802945][T11596] validate_nla: 9 callbacks suppressed [ 1185.802957][T11596] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1185.874740][T11596] bond46 (uninitialized): Released all slaves 14:58:37 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, 0x0, 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0xc00, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:58:37 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0xc0}}, 0x0) 14:58:37 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfcffffff}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1186.188460][T11625] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1186.237579][T11625] device bond391 entered promiscuous mode [ 1186.256043][T11625] 8021q: adding VLAN 0 to HW filter on device bond391 [ 1186.298575][T11628] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 14:58:37 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000140)=[{r2}], 0x1, 0x200) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000240)={@loopback, @local, 0x0}, &(0x7f00000003c0)=0xc) connect$can_bcm(r2, &(0x7f0000000400)={0x1d, r3}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r5 = socket(0x400000000000010, 0x802, 0x0) write(r5, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) ioctl$SIOCX25SDTEFACILITIES(r1, 0x89eb, &(0x7f0000000440)={0x101, 0x101, 0x3, 0x5, 0x5, 0xb, 0xc, "eca67752c74d4bc866dd52c11d080465f3e54bb7", "62b3cb4043cffeb8b06b5891ebd58767bc5ccc03"}) setsockopt$sock_linger(r4, 0x1, 0x2f, &(0x7f0000000100), 0x8) socket$kcm(0x10, 0x2, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000140)=[{r6}], 0x1, 0x200) syz_mount_image$exfat(&(0x7f00000001c0)='exfat\x00', &(0x7f0000000200)='./file0\x00', 0x101, 0x0, &(0x7f0000000240), 0x2000, &(0x7f00000002c0)={[{@iocharset={'iocharset', 0x3d, 'cp775'}}, {@namecase='namecase=1'}, {@utf8='utf8'}, {@umask={'umask', 0x3d, 0x4}}, {@dmask={'dmask', 0x3d, 0x1000}}, {@uid={'uid', 0x3d, 0xee01}}, {@errors_remount='errors=remount-ro'}, {@fmask={'fmask', 0x3d, 0x7}}], [{@appraise='appraise'}, {@smackfshat={'smackfshat', 0x3d, '-:md5sum,nodev'}}, {@hash='hash'}, {@permit_directio='permit_directio'}]}) [ 1186.341585][T11628] bond46 (uninitialized): Released all slaves 14:58:37 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0xec0}}, 0x0) 14:58:37 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfcffffff}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1186.628402][ T26] audit: type=1804 audit(1573657118.010:1009): pid=11605 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir400658008/syzkaller.KycbHe/1477/file0/file0" dev="sda1" ino=17462 res=1 [ 1186.663038][T11651] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1186.714153][T11651] device bond392 entered promiscuous mode [ 1186.722315][ T26] audit: type=1800 audit(1573657118.040:1010): pid=11605 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="file0" dev="sda1" ino=17462 res=0 [ 1186.752636][T11651] 8021q: adding VLAN 0 to HW filter on device bond392 14:58:38 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x81, 0x1, 0x3f, 0x0, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x0, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0x100011, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1186.776712][ T26] audit: type=1804 audit(1573657118.040:1011): pid=11638 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir400658008/syzkaller.KycbHe/1477/file0/file0" dev="sda1" ino=17462 res=1 [ 1186.808627][T11655] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1186.850125][T11655] bond46 (uninitialized): Released all slaves 14:58:38 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2000}}, 0x0) 14:58:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0xfcffffff}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:58:38 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00120, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1187.042076][ T26] audit: type=1804 audit(1573657118.420:1012): pid=11622 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir923645982/syzkaller.aWZZDI/812/file0" dev="sda1" ino=17442 res=1 [ 1187.058309][T11667] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 14:58:38 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000140)=[{r2}], 0x1, 0x200) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000240)={@loopback, @local, 0x0}, &(0x7f00000003c0)=0xc) connect$can_bcm(r2, &(0x7f0000000400)={0x1d, r3}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r5 = socket(0x400000000000010, 0x802, 0x0) write(r5, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) ioctl$SIOCX25SDTEFACILITIES(r1, 0x89eb, &(0x7f0000000440)={0x101, 0x101, 0x3, 0x5, 0x5, 0xb, 0xc, "eca67752c74d4bc866dd52c11d080465f3e54bb7", "62b3cb4043cffeb8b06b5891ebd58767bc5ccc03"}) setsockopt$sock_linger(r4, 0x1, 0x2f, &(0x7f0000000100), 0x8) socket$kcm(0x10, 0x2, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000140)=[{r6}], 0x1, 0x200) [ 1187.142273][T11667] device bond393 entered promiscuous mode [ 1187.159000][T11667] 8021q: adding VLAN 0 to HW filter on device bond393 [ 1187.180965][T11668] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 14:58:38 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, 0x0, 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0xd00, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1187.228058][T11668] device bond46 entered promiscuous mode [ 1187.238498][T11668] 8021q: adding VLAN 0 to HW filter on device bond46 14:58:38 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x33fe0}}, 0x0) 14:58:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0xfcffffff}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1187.694064][T11706] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1187.769537][T11706] device bond47 entered promiscuous mode [ 1187.792538][T11706] 8021q: adding VLAN 0 to HW filter on device bond47 [ 1187.823946][T11707] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1187.903484][T11707] device bond394 entered promiscuous mode [ 1187.938570][T11707] 8021q: adding VLAN 0 to HW filter on device bond394 14:58:39 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0xfcffffff}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1188.066176][ T26] audit: type=1804 audit(1573657119.450:1013): pid=11687 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir400658008/syzkaller.KycbHe/1478/file0/file0" dev="loop0" ino=818 res=1 14:58:39 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000140)=[{r2}], 0x1, 0x200) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000240)={@loopback, @local, 0x0}, &(0x7f00000003c0)=0xc) connect$can_bcm(r2, &(0x7f0000000400)={0x1d, r3}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r5 = socket(0x400000000000010, 0x802, 0x0) write(r5, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) ioctl$SIOCX25SDTEFACILITIES(r1, 0x89eb, &(0x7f0000000440)={0x101, 0x101, 0x3, 0x5, 0x5, 0xb, 0xc, "eca67752c74d4bc866dd52c11d080465f3e54bb7", "62b3cb4043cffeb8b06b5891ebd58767bc5ccc03"}) setsockopt$sock_linger(r4, 0x1, 0x2f, &(0x7f0000000100), 0x8) socket$kcm(0x10, 0x2, 0x10) pipe(&(0x7f00000000c0)) 14:58:39 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2000086c}}, 0x0) 14:58:39 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x81, 0x1, 0x3f, 0x0, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x0, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0x100011, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1188.320066][T11726] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 14:58:39 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00220, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1188.429059][T11726] device bond395 entered promiscuous mode [ 1188.437800][T11726] 8021q: adding VLAN 0 to HW filter on device bond395 [ 1188.453773][T11729] device bond48 entered promiscuous mode [ 1188.509960][T11729] 8021q: adding VLAN 0 to HW filter on device bond48 14:58:39 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x7ffff000}}, 0x0) 14:58:39 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, 0x0, 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0xe00, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:58:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r2, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xfcffffff}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1188.797122][T11751] device bond396 entered promiscuous mode 14:58:40 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000140)=[{r2}], 0x1, 0x200) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000240)={@loopback, @local, 0x0}, &(0x7f00000003c0)=0xc) connect$can_bcm(r2, &(0x7f0000000400)={0x1d, r3}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r5 = socket(0x400000000000010, 0x802, 0x0) write(r5, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) ioctl$SIOCX25SDTEFACILITIES(r1, 0x89eb, &(0x7f0000000440)={0x101, 0x101, 0x3, 0x5, 0x5, 0xb, 0xc, "eca67752c74d4bc866dd52c11d080465f3e54bb7", "62b3cb4043cffeb8b06b5891ebd58767bc5ccc03"}) setsockopt$sock_linger(r4, 0x1, 0x2f, &(0x7f0000000100), 0x8) socket$kcm(0x10, 0x2, 0x10) [ 1188.860906][T11751] 8021q: adding VLAN 0 to HW filter on device bond396 [ 1188.919849][T11764] bond49 (uninitialized): Released all slaves 14:58:40 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0xfffffdef}}, 0x0) 14:58:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r2, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xfcffffff}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1189.271502][T11778] bond49 (uninitialized): Released all slaves [ 1189.318282][T11777] device bond397 entered promiscuous mode [ 1189.334394][T11777] 8021q: adding VLAN 0 to HW filter on device bond397 [ 1189.373405][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 1189.373485][ T26] audit: type=1804 audit(1573657120.750:1016): pid=11759 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir400658008/syzkaller.KycbHe/1479/file0/file0" dev="loop0" ino=820 res=1 14:58:40 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}, 0x2}, 0x0) [ 1189.437003][ T26] audit: type=1804 audit(1573657120.790:1017): pid=11782 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir400658008/syzkaller.KycbHe/1479/file0/file0" dev="loop0" ino=820 res=1 14:58:40 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x81, 0x1, 0x3f, 0x0, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x0, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0x100011, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:58:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r2, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xfcffffff}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:58:41 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00320, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:58:41 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000140)=[{r2}], 0x1, 0x200) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000240)={@loopback, @local, 0x0}, &(0x7f00000003c0)=0xc) connect$can_bcm(r2, &(0x7f0000000400)={0x1d, r3}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r5 = socket(0x400000000000010, 0x802, 0x0) write(r5, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) ioctl$SIOCX25SDTEFACILITIES(r1, 0x89eb, &(0x7f0000000440)={0x101, 0x101, 0x3, 0x5, 0x5, 0xb, 0xc, "eca67752c74d4bc866dd52c11d080465f3e54bb7", "62b3cb4043cffeb8b06b5891ebd58767bc5ccc03"}) setsockopt$sock_linger(r4, 0x1, 0x2f, &(0x7f0000000100), 0x8) [ 1189.707869][ T26] audit: type=1804 audit(1573657121.090:1018): pid=11750 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir923645982/syzkaller.aWZZDI/814/file0" dev="sda1" ino=17480 res=1 [ 1189.749397][T11796] device bond398 entered promiscuous mode [ 1189.756444][T11796] 8021q: adding VLAN 0 to HW filter on device bond398 [ 1189.852305][T11798] bond49 (uninitialized): Released all slaves 14:58:41 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, 0x0, 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0xf00, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:58:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r2, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xfcffffff}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:58:41 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}, 0x3}, 0x0) [ 1190.309067][T11826] device bond399 entered promiscuous mode [ 1190.350183][T11826] 8021q: adding VLAN 0 to HW filter on device bond399 14:58:41 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000140)=[{r2}], 0x1, 0x200) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000240)={@loopback, @local, 0x0}, &(0x7f00000003c0)=0xc) connect$can_bcm(r2, &(0x7f0000000400)={0x1d, r3}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r5 = socket(0x400000000000010, 0x802, 0x0) write(r5, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) ioctl$SIOCX25SDTEFACILITIES(r1, 0x89eb, &(0x7f0000000440)={0x101, 0x101, 0x3, 0x5, 0x5, 0xb, 0xc, "eca67752c74d4bc866dd52c11d080465f3e54bb7", "62b3cb4043cffeb8b06b5891ebd58767bc5ccc03"}) setsockopt$sock_linger(r4, 0x1, 0x2f, &(0x7f0000000100), 0x8) 14:58:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r2, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xfcffffff}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:58:42 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}, 0x4}, 0x0) 14:58:42 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x81, 0x1, 0x3f, 0x0, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x0, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0x100011, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1190.767893][ T26] audit: type=1804 audit(1573657122.150:1019): pid=11810 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir400658008/syzkaller.KycbHe/1480/file0/file0" dev="loop0" ino=824 res=1 14:58:42 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r2, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xfcffffff}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1190.810898][T11848] validate_nla: 8 callbacks suppressed [ 1190.810911][T11848] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1190.881874][ T26] audit: type=1804 audit(1573657122.260:1020): pid=11824 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir923645982/syzkaller.aWZZDI/815/file0" dev="sda1" ino=17480 res=1 [ 1190.887734][T11848] device bond400 entered promiscuous mode [ 1190.928667][T11848] 8021q: adding VLAN 0 to HW filter on device bond400 14:58:42 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00420, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:58:42 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r2, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xfcffffff}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:58:42 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}, 0x8}, 0x0) 14:58:42 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, 0x0, 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x1100, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1191.214481][T11869] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 14:58:42 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000140)=[{r2}], 0x1, 0x200) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000240)={@loopback, @local, 0x0}, &(0x7f00000003c0)=0xc) connect$can_bcm(r2, &(0x7f0000000400)={0x1d, r3}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r5 = socket(0x400000000000010, 0x802, 0x0) write(r5, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) ioctl$SIOCX25SDTEFACILITIES(r1, 0x89eb, &(0x7f0000000440)={0x101, 0x101, 0x3, 0x5, 0x5, 0xb, 0xc, "eca67752c74d4bc866dd52c11d080465f3e54bb7", "62b3cb4043cffeb8b06b5891ebd58767bc5ccc03"}) [ 1191.278236][T11869] device bond401 entered promiscuous mode [ 1191.305908][T11869] 8021q: adding VLAN 0 to HW filter on device bond401 [ 1191.333981][T11872] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1191.441547][T11872] device bond49 entered promiscuous mode [ 1191.463112][T11872] 8021q: adding VLAN 0 to HW filter on device bond49 14:58:42 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r2, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xfcffffff}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:58:43 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}, 0x10}, 0x0) [ 1191.698132][T11899] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1191.810821][T11899] device bond50 entered promiscuous mode [ 1191.825119][T11899] 8021q: adding VLAN 0 to HW filter on device bond50 [ 1191.837322][T11902] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1191.893614][T11902] device bond402 entered promiscuous mode [ 1191.914544][T11902] 8021q: adding VLAN 0 to HW filter on device bond402 14:58:43 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}, 0x33}, 0x0) 14:58:43 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r2, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xfcffffff}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:58:43 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000140)=[{r2}], 0x1, 0x200) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000240)={@loopback, @local, 0x0}, &(0x7f00000003c0)=0xc) connect$can_bcm(r2, &(0x7f0000000400)={0x1d, r3}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r5 = socket(0x400000000000010, 0x802, 0x0) write(r5, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) ioctl$SIOCX25SDTEFACILITIES(r1, 0x89eb, &(0x7f0000000440)={0x101, 0x101, 0x3, 0x5, 0x5, 0xb, 0xc, "eca67752c74d4bc866dd52c11d080465f3e54bb7", "62b3cb4043cffeb8b06b5891ebd58767bc5ccc03"}) 14:58:43 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x81, 0x1, 0x3f, 0x0, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x0, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0x100011, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1192.129714][ T26] audit: type=1804 audit(1573657123.510:1021): pid=11875 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir400658008/syzkaller.KycbHe/1481/file0/file0" dev="loop0" ino=826 res=1 [ 1192.135607][T11916] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1192.163689][ T26] audit: type=1804 audit(1573657123.540:1022): pid=11889 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir923645982/syzkaller.aWZZDI/816/file0" dev="sda1" ino=17486 res=1 14:58:43 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, 0x0, 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x1200, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:58:43 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xd00020, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1192.300177][T11916] device bond403 entered promiscuous mode [ 1192.310839][T11916] 8021q: adding VLAN 0 to HW filter on device bond403 [ 1192.340514][T11919] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1192.398846][T11919] device bond51 entered promiscuous mode [ 1192.404908][T11919] 8021q: adding VLAN 0 to HW filter on device bond51 14:58:43 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}, 0x118}, 0x0) 14:58:43 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0xfcffffff}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1192.791606][T11958] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1192.877292][T11958] device bond404 entered promiscuous mode [ 1192.908206][T11958] 8021q: adding VLAN 0 to HW filter on device bond404 14:58:44 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000140)=[{r2}], 0x1, 0x200) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000240)={@loopback, @local, 0x0}, &(0x7f00000003c0)=0xc) connect$can_bcm(r2, &(0x7f0000000400)={0x1d, r3}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r5 = socket(0x400000000000010, 0x802, 0x0) write(r5, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) [ 1192.928555][T11963] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1192.992835][T11963] bond52 (uninitialized): Released all slaves 14:58:44 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}, 0x300}, 0x0) 14:58:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0xfcffffff}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1193.311411][ T26] audit: type=1804 audit(1573657124.690:1023): pid=11942 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir923645982/syzkaller.aWZZDI/817/file0" dev="sda1" ino=16641 res=1 [ 1193.374337][T11977] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 14:58:44 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x81, 0x1, 0x3f, 0x0, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x0, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0x100011, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1193.438931][T11977] device bond405 entered promiscuous mode [ 1193.471522][T11977] 8021q: adding VLAN 0 to HW filter on device bond405 [ 1193.495458][T11987] bond52 (uninitialized): Released all slaves [ 1193.502498][ T26] audit: type=1804 audit(1573657124.880:1024): pid=11939 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir400658008/syzkaller.KycbHe/1482/file0/file0" dev="sda1" ino=16523 res=1 14:58:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0xfcffffff}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1193.561415][ T26] audit: type=1800 audit(1573657124.910:1025): pid=11939 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="file0" dev="sda1" ino=16523 res=0 14:58:45 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}, 0x324}, 0x0) 14:58:45 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, 0x0, 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x1300, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:58:45 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000140)=[{r2}], 0x1, 0x200) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000240)={@loopback, @local, 0x0}, &(0x7f00000003c0)=0xc) connect$can_bcm(r2, &(0x7f0000000400)={0x1d, r3}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) 14:58:45 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xd00120, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1193.798607][T11997] bond52 (uninitialized): Released all slaves 14:58:45 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0xfcffffff}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1193.949204][T12009] device bond406 entered promiscuous mode [ 1194.019384][T12009] 8021q: adding VLAN 0 to HW filter on device bond406 [ 1194.072927][T12022] bond52 (uninitialized): Released all slaves 14:58:45 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0xfcffffff}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:58:45 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}, 0x336}, 0x0) [ 1194.327737][T12033] bond52 (uninitialized): Released all slaves 14:58:45 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0xfcffffff}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1194.537599][T12038] device bond407 entered promiscuous mode 14:58:45 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000140)=[{r2}], 0x1, 0x200) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000240)={@loopback, @local, 0x0}, &(0x7f00000003c0)=0xc) connect$can_bcm(r2, &(0x7f0000000400)={0x1d, r3}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) [ 1194.586411][T12038] 8021q: adding VLAN 0 to HW filter on device bond407 14:58:46 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x81, 0x1, 0x3f, 0x0, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x0, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0x100011, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1194.680822][T12043] bond52 (uninitialized): Released all slaves 14:58:46 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}, 0x339}, 0x0) [ 1194.822316][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 1194.822334][ T26] audit: type=1804 audit(1573657126.200:1027): pid=12012 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir923645982/syzkaller.aWZZDI/818/file0" dev="sda1" ino=16523 res=1 14:58:46 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0xfcffffff}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1194.869803][ T26] audit: type=1804 audit(1573657126.250:1028): pid=12055 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir400658008/syzkaller.KycbHe/1483/file0/file0" dev="loop0" ino=830 res=1 14:58:46 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, 0x0, 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x1400, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1195.050437][T12064] device bond408 entered promiscuous mode [ 1195.057848][T12064] 8021q: adding VLAN 0 to HW filter on device bond408 14:58:46 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xd00220, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1195.138273][T12068] device bond52 entered promiscuous mode [ 1195.144806][T12068] 8021q: adding VLAN 0 to HW filter on device bond52 14:58:46 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}, 0x2000}, 0x0) 14:58:46 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0xfcffffff}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:58:46 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000140)=[{r2}], 0x1, 0x200) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000240)={@loopback, @local, 0x0}, &(0x7f00000003c0)=0xc) connect$can_bcm(r2, &(0x7f0000000400)={0x1d, r3}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) [ 1195.523241][T12094] device bond409 entered promiscuous mode [ 1195.558708][T12094] 8021q: adding VLAN 0 to HW filter on device bond409 [ 1195.691357][T12097] device bond53 entered promiscuous mode [ 1195.719580][T12097] 8021q: adding VLAN 0 to HW filter on device bond53 14:58:47 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x81, 0x1, 0x3f, 0x0, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0x100011, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:58:47 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}, 0x1, 0x2}, 0x0) 14:58:47 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0xfcffffff}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1195.938349][ T26] audit: type=1804 audit(1573657127.320:1029): pid=12077 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir923645982/syzkaller.aWZZDI/819/file0" dev="sda1" ino=17500 res=1 [ 1195.986275][T12113] validate_nla: 12 callbacks suppressed [ 1195.986287][T12113] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1196.053698][T12113] device bond54 entered promiscuous mode 14:58:47 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, 0x0, 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x1500, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1196.117052][T12113] 8021q: adding VLAN 0 to HW filter on device bond54 [ 1196.169761][ T26] audit: type=1804 audit(1573657127.550:1030): pid=12093 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir400658008/syzkaller.KycbHe/1484/file0/file0" dev="sda1" ino=17510 res=1 [ 1196.207124][T12115] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 14:58:47 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000140)=[{r2}], 0x1, 0x200) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000240)={@loopback, @local, 0x0}, &(0x7f00000003c0)=0xc) connect$can_bcm(r2, &(0x7f0000000400)={0x1d, r3}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket(0x400000000000010, 0x802, 0x0) write(r4, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) [ 1196.318355][T12115] device bond410 entered promiscuous mode [ 1196.350221][T12115] 8021q: adding VLAN 0 to HW filter on device bond410 14:58:47 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xd00320, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:58:47 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0xfcffffff}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:58:47 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}, 0x1, 0x3}, 0x0) [ 1196.584896][T12145] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1196.649368][T12145] device bond55 entered promiscuous mode [ 1196.665370][T12145] 8021q: adding VLAN 0 to HW filter on device bond55 [ 1196.678371][T12149] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1196.764455][T12149] device bond411 entered promiscuous mode [ 1196.770781][T12149] 8021q: adding VLAN 0 to HW filter on device bond411 14:58:48 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0xfcffffff}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1196.872295][ T26] audit: type=1804 audit(1573657128.250:1031): pid=12130 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir923645982/syzkaller.aWZZDI/820/file0" dev="sda1" ino=16689 res=1 14:58:48 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000140)=[{r2}], 0x1, 0x200) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000240)={@loopback, @local, 0x0}, &(0x7f00000003c0)=0xc) connect$can_bcm(r2, &(0x7f0000000400)={0x1d, r3}, 0x10) r4 = socket(0x400000000000010, 0x802, 0x0) write(r4, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) 14:58:48 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}, 0x1, 0x4}, 0x0) [ 1196.997153][T12164] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 14:58:48 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x81, 0x1, 0x3f, 0x0, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0x100011, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1197.112220][T12164] device bond56 entered promiscuous mode [ 1197.172539][T12164] 8021q: adding VLAN 0 to HW filter on device bond56 14:58:48 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, 0x0, 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x2000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1197.226842][T12173] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 14:58:48 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0xfcffffff}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1197.326580][T12173] device bond412 entered promiscuous mode [ 1197.362089][T12173] 8021q: adding VLAN 0 to HW filter on device bond412 [ 1197.489864][T12188] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 14:58:48 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}, 0x1, 0x6}, 0x0) [ 1197.568104][T12188] device bond57 entered promiscuous mode [ 1197.611246][T12188] 8021q: adding VLAN 0 to HW filter on device bond57 [ 1197.658291][ T26] audit: type=1804 audit(1573657129.040:1032): pid=12159 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir400658008/syzkaller.KycbHe/1485/file0/file0" dev="sda1" ino=16913 res=1 14:58:49 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0xfcffffff}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:58:49 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000140)=[{r2}], 0x1, 0x200) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000240)={@loopback, @local}, &(0x7f00000003c0)=0xc) r3 = socket(0x400000000000010, 0x802, 0x0) write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) [ 1197.786970][T12204] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1197.788241][ T26] audit: type=1800 audit(1573657129.040:1033): pid=12159 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="file0" dev="sda1" ino=16913 res=0 [ 1197.845932][ T26] audit: type=1804 audit(1573657129.040:1034): pid=12191 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir400658008/syzkaller.KycbHe/1485/file0/file0" dev="sda1" ino=16913 res=1 [ 1197.889338][T12204] device bond413 entered promiscuous mode 14:58:49 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xd00420, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1197.970592][T12204] 8021q: adding VLAN 0 to HW filter on device bond413 [ 1198.007889][T12207] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1198.077311][T12207] device bond58 entered promiscuous mode [ 1198.093523][T12207] 8021q: adding VLAN 0 to HW filter on device bond58 [ 1198.150988][ T26] audit: type=1804 audit(1573657129.530:1035): pid=12178 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir923645982/syzkaller.aWZZDI/821/file0" dev="sda1" ino=16519 res=1 14:58:49 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}, 0x1, 0xa}, 0x0) 14:58:49 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0xfcffffff}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:58:49 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, 0x0, 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x3000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1198.350211][T12236] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 14:58:49 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x81, 0x1, 0x3f, 0x0, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0x100011, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1198.399470][T12236] device bond59 entered promiscuous mode [ 1198.410313][T12236] 8021q: adding VLAN 0 to HW filter on device bond59 [ 1198.501638][T12234] device bond414 entered promiscuous mode [ 1198.544960][T12234] 8021q: adding VLAN 0 to HW filter on device bond414 14:58:50 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000140)=[{r2}], 0x1, 0x200) r3 = socket(0x400000000000010, 0x802, 0x0) write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) 14:58:50 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0xfcffffff}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:58:50 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}, 0x1, 0xc}, 0x0) [ 1198.830592][ T26] audit: type=1804 audit(1573657130.210:1036): pid=12229 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir400658008/syzkaller.KycbHe/1486/file0/file0" dev="loop0" ino=836 res=1 [ 1198.927520][T12261] device bond60 entered promiscuous mode [ 1198.983108][T12261] 8021q: adding VLAN 0 to HW filter on device bond60 [ 1199.034487][T12274] device bond415 entered promiscuous mode [ 1199.055151][T12274] 8021q: adding VLAN 0 to HW filter on device bond415 14:58:50 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0xfcffffff}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:58:50 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xe00020, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:58:50 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}, 0x1, 0xe}, 0x0) [ 1199.264782][T12284] bond61 (uninitialized): Released all slaves 14:58:50 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f00000000c0)) r2 = socket(0x400000000000010, 0x802, 0x0) write(r2, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) 14:58:50 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0xfcffffff}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1199.480901][T12292] device bond416 entered promiscuous mode 14:58:50 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, 0x0, 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x4000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1199.584990][T12292] 8021q: adding VLAN 0 to HW filter on device bond416 14:58:51 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x81, 0x1, 0x3f, 0x0, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x0, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0x100011, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1199.653409][T12306] bond61 (uninitialized): Released all slaves 14:58:51 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f00000000c0)) r2 = socket(0x400000000000010, 0x802, 0x0) write(r2, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) 14:58:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}, 0x1, 0xf}, 0x0) 14:58:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0xfcffffff}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:58:51 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x400000000000010, 0x802, 0x0) write(r2, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) [ 1200.040928][T12329] device bond417 entered promiscuous mode [ 1200.077529][T12329] 8021q: adding VLAN 0 to HW filter on device bond417 [ 1200.135794][T12331] bond61 (uninitialized): Released all slaves 14:58:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}, 0x1, 0x10}, 0x0) 14:58:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfcffffff}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1200.340499][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 1200.340519][ T26] audit: type=1804 audit(1573657131.720:1038): pid=12295 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir400658008/syzkaller.KycbHe/1487/file0/file0" dev="loop0" ino=838 res=1 [ 1200.501258][ T26] audit: type=1804 audit(1573657131.750:1039): pid=12345 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir400658008/syzkaller.KycbHe/1487/file0/file0" dev="loop0" ino=838 res=1 [ 1200.516036][T12357] bond61 (uninitialized): Released all slaves [ 1200.562398][ T26] audit: type=1804 audit(1573657131.940:1040): pid=12312 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir923645982/syzkaller.aWZZDI/823/file0" dev="sda1" ino=17137 res=1 14:58:52 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xe00120, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:58:52 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = socket(0x400000000000010, 0x802, 0x0) write(r1, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) [ 1200.611620][T12363] device bond418 entered promiscuous mode [ 1200.641470][T12363] 8021q: adding VLAN 0 to HW filter on device bond418 14:58:52 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, 0x0, 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x5000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:58:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}, 0x1, 0x60}, 0x0) 14:58:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfcffffff}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1200.946950][T12379] device bond419 entered promiscuous mode 14:58:52 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x81, 0x1, 0x3f, 0x0, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x0, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0x100011, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:58:52 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = socket(0x400000000000010, 0x802, 0x0) write(r1, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) [ 1200.987129][T12379] 8021q: adding VLAN 0 to HW filter on device bond419 [ 1201.058131][T12388] validate_nla: 11 callbacks suppressed [ 1201.058191][T12388] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1201.085861][T12388] bond61 (uninitialized): Released all slaves 14:58:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfcffffff}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:58:52 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = socket(0x400000000000010, 0x802, 0x0) write(r1, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) 14:58:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}, 0x1, 0x300}, 0x0) [ 1201.378081][T12403] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1201.454719][T12403] bond61 (uninitialized): Released all slaves 14:58:52 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket(0x400000000000010, 0x802, 0x0) write(r0, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) [ 1201.507349][T12405] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1201.600447][T12405] device bond420 entered promiscuous mode [ 1201.625651][T12405] 8021q: adding VLAN 0 to HW filter on device bond420 [ 1201.647434][ T26] audit: type=1804 audit(1573657133.030:1041): pid=12377 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir923645982/syzkaller.aWZZDI/824/file0" dev="sda1" ino=17121 res=1 [ 1201.688092][T12409] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 14:58:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0xfcffffff}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1201.833583][ T26] audit: type=1804 audit(1573657133.040:1042): pid=12416 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir400658008/syzkaller.KycbHe/1488/file0/file0" dev="sda1" ino=16610 res=1 [ 1201.937311][T12436] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1202.030034][T12436] bond61 (uninitialized): Released all slaves 14:58:53 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xe00220, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:58:53 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket(0x400000000000010, 0x802, 0x0) write(r0, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) 14:58:53 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}, 0x1, 0x600}, 0x0) 14:58:53 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, 0x0, 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x6000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:58:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0xfcffffff}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1202.190331][T12445] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1202.283604][T12445] device bond421 entered promiscuous mode [ 1202.308032][T12445] 8021q: adding VLAN 0 to HW filter on device bond421 [ 1202.342520][T12452] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1202.370848][T12452] bond61 (uninitialized): Released all slaves 14:58:53 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x81, 0x1, 0x3f, 0x0, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x0, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0x100011, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:58:53 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket(0x400000000000010, 0x802, 0x0) write(r0, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) 14:58:53 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}, 0x1, 0xa00}, 0x0) 14:58:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0xfcffffff}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1202.661421][T12472] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 14:58:54 executing program 4: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x400000000000010, 0x802, 0x0) write(r1, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) [ 1202.787364][T12472] device bond422 entered promiscuous mode [ 1202.818583][T12472] 8021q: adding VLAN 0 to HW filter on device bond422 [ 1202.871419][T12477] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 1202.977030][T12477] bond61 (uninitialized): Released all slaves 14:58:54 executing program 4: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x400000000000010, 0x802, 0x0) write(r1, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) 14:58:54 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r2, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xfcffffff}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1203.245095][ T26] audit: type=1804 audit(1573657134.630:1043): pid=12448 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir923645982/syzkaller.aWZZDI/825/file0" dev="sda1" ino=16610 res=1 14:58:55 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xe00320, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:58:55 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}, 0x1, 0xc00}, 0x0) 14:58:55 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r2, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xfcffffff}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:58:55 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, 0x0, 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x7000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:58:55 executing program 4: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x400000000000010, 0x802, 0x0) write(r1, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) [ 1203.693418][T12518] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1203.810262][T12518] device bond423 entered promiscuous mode [ 1203.863009][T12518] 8021q: adding VLAN 0 to HW filter on device bond423 14:58:55 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x81, 0x1, 0x3f, 0x0, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x0, 0x5, 0x5}, 0x0, 0x0, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0x100011, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:58:55 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x400000000000010, 0x802, 0x0) write(r2, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) 14:58:55 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r2, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xfcffffff}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:58:55 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}, 0x1, 0xe00}, 0x0) 14:58:55 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0xfcffffff}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:58:55 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x400000000000010, 0x802, 0x0) write(r2, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) [ 1204.298963][T12543] device bond424 entered promiscuous mode [ 1204.350376][T12543] 8021q: adding VLAN 0 to HW filter on device bond424 [ 1204.476630][ T26] audit: type=1804 audit(1573657135.850:1044): pid=12519 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir923645982/syzkaller.aWZZDI/826/file0" dev="sda1" ino=16689 res=1 14:58:55 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}, 0x1, 0xf00}, 0x0) [ 1204.764928][ T26] audit: type=1804 audit(1573657136.150:1045): pid=12567 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir400658008/syzkaller.KycbHe/1490/file0/file0" dev="sda1" ino=17393 res=1 [ 1204.773110][T12570] device bond425 entered promiscuous mode [ 1204.802509][T12570] 8021q: adding VLAN 0 to HW filter on device bond425 [ 1204.858929][ T26] audit: type=1800 audit(1573657136.180:1046): pid=12567 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="file0" dev="sda1" ino=17393 res=0 [ 1204.916552][ T26] audit: type=1804 audit(1573657136.180:1047): pid=12568 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir400658008/syzkaller.KycbHe/1490/file0/file0" dev="sda1" ino=17393 res=1 14:58:56 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xe00420, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:58:56 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0xfcffffff}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:58:56 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, 0x0, 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x8008, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:58:56 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x400000000000010, 0x802, 0x0) write(r2, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) 14:58:56 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}, 0x1, 0x3f00}, 0x0) [ 1205.268951][T12589] device bond426 entered promiscuous mode [ 1205.279784][T12589] 8021q: adding VLAN 0 to HW filter on device bond426 14:58:56 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x81, 0x1, 0x3f, 0x0, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x0, 0x5, 0x5}, 0x0, 0x0, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0x100011, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:58:56 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x400000000000010, 0x802, 0x0) write(r2, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) 14:58:56 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0xfcffffff}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:58:56 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}, 0x1, 0x4000}, 0x0) 14:58:56 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x400000000000010, 0x802, 0x0) write(r2, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) 14:58:57 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0xfcffffff}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1205.666772][T12613] device bond427 entered promiscuous mode [ 1205.672729][T12613] 8021q: adding VLAN 0 to HW filter on device bond427 14:58:57 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x400000000000010, 0x802, 0x0) write(r2, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) [ 1205.869533][ T26] audit: type=1804 audit(1573657137.250:1048): pid=12594 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir923645982/syzkaller.aWZZDI/827/file0" dev="sda1" ino=17525 res=1 [ 1206.322874][ T26] audit: type=1804 audit(1573657137.700:1049): pid=12639 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir400658008/syzkaller.KycbHe/1491/file0/file0" dev="sda1" ino=17377 res=1 14:58:57 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xf00020, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:58:57 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}, 0x1, 0x5865}, 0x0) 14:58:57 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, 0x0, 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x9000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:58:57 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket(0x400000000000010, 0x802, 0x0) write(r1, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) 14:58:57 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0xfcffffff}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1206.539870][T12647] validate_nla: 4 callbacks suppressed [ 1206.539882][T12647] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1206.626662][T12647] device bond428 entered promiscuous mode [ 1206.651748][T12647] 8021q: adding VLAN 0 to HW filter on device bond428 14:58:58 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket(0x400000000000010, 0x802, 0x0) write(r1, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) 14:58:58 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0xfcffffff}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:58:58 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x81, 0x1, 0x3f, 0x0, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x0, 0x5, 0x5}, 0x0, 0x0, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0x100011, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:58:58 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}, 0x1, 0x6000}, 0x0) 14:58:58 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket(0x400000000000010, 0x802, 0x0) write(r1, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) [ 1206.922079][T12672] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1207.104493][T12672] device bond429 entered promiscuous mode [ 1207.143573][T12672] 8021q: adding VLAN 0 to HW filter on device bond429 14:58:58 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0xfcffffff}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:58:58 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = socket(0x400000000000010, 0x802, 0x0) write(r2, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) [ 1207.341905][ T26] audit: type=1804 audit(1573657138.720:1050): pid=12653 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir923645982/syzkaller.aWZZDI/828/file0" dev="sda1" ino=17528 res=1 [ 1207.530261][ T26] audit: type=1804 audit(1573657138.850:1051): pid=12662 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir400658008/syzkaller.KycbHe/1492/file0/file0" dev="loop0" ino=842 res=1 14:58:59 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xf00120, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:58:59 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, 0x0, 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0xa000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:58:59 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0xfcffffff}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:58:59 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}, 0x1, 0x6558}, 0x0) 14:58:59 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = socket(0x400000000000010, 0x802, 0x0) write(r2, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) [ 1207.775884][T12715] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 14:58:59 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x81, 0x1, 0x3f, 0x0, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x0, 0x5, 0x5}, 0x0, 0x5, 0xffffffffffffffff, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0x100011, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1207.888305][T12715] device bond430 entered promiscuous mode [ 1207.907258][T12715] 8021q: adding VLAN 0 to HW filter on device bond430 14:58:59 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = socket(0x400000000000010, 0x802, 0x0) write(r2, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) 14:58:59 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0xfcffffff}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:58:59 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}, 0x1, 0x8100}, 0x0) [ 1208.284707][T12745] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 14:58:59 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3], 0x2}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0xfcffffff}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:58:59 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x0, 0x802, 0x0) write(r2, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) [ 1208.399059][T12745] device bond431 entered promiscuous mode [ 1208.435631][T12745] 8021q: adding VLAN 0 to HW filter on device bond431 14:59:00 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3], 0x2}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0xfcffffff}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1208.605777][ T26] audit: type=1804 audit(1573657139.990:1052): pid=12724 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir923645982/syzkaller.aWZZDI/829/file0" dev="sda1" ino=16866 res=1 [ 1208.849083][ T26] audit: type=1804 audit(1573657140.230:1053): pid=12725 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir400658008/syzkaller.KycbHe/1493/file0/file0" dev="loop0" ino=846 res=1 14:59:00 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xf00220, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:59:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}, 0x1, 0x1000000}, 0x0) 14:59:00 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x0, 0x802, 0x0) write(r2, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) 14:59:00 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3], 0x2}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0xfcffffff}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:59:00 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, 0x0, 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0xb000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:59:00 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x81, 0x1, 0x3f, 0x0, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x0, 0x5, 0x5}, 0x0, 0x5, 0xffffffffffffffff, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0x100011, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1209.078628][T12782] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 14:59:00 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x0, 0x802, 0x0) write(r2, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) 14:59:00 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB], 0x3}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0xfcffffff}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1209.205185][T12782] device bond432 entered promiscuous mode [ 1209.231650][T12782] 8021q: adding VLAN 0 to HW filter on device bond432 14:59:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}, 0x1, 0x2000000}, 0x0) 14:59:00 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x400000000000010, 0x0, 0x0) write(r2, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) 14:59:01 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB], 0x3}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0xfcffffff}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1209.638625][T12817] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1209.765547][T12817] device bond433 entered promiscuous mode [ 1209.800868][T12817] 8021q: adding VLAN 0 to HW filter on device bond433 14:59:01 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB], 0x3}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0xfcffffff}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1210.075640][ T26] audit: type=1804 audit(1573657141.460:1054): pid=12792 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir923645982/syzkaller.aWZZDI/830/file0" dev="sda1" ino=17535 res=1 [ 1210.193822][ T26] audit: type=1804 audit(1573657141.520:1055): pid=12827 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir923645982/syzkaller.aWZZDI/830/file0" dev="sda1" ino=17535 res=1 [ 1210.268795][ T26] audit: type=1804 audit(1573657141.590:1056): pid=12835 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir400658008/syzkaller.KycbHe/1494/file0" dev="sda1" ino=17201 res=1 [ 1210.300955][ T26] audit: type=1800 audit(1573657141.590:1057): pid=12835 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="file0" dev="sda1" ino=17201 res=0 14:59:01 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xf00320, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:59:01 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x400000000000010, 0x0, 0x0) write(r2, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) 14:59:01 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}, 0x1, 0x3000000}, 0x0) 14:59:01 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x81, 0x1, 0x3f, 0x0, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x0, 0x5, 0x5}, 0x0, 0x5, 0xffffffffffffffff, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0x100011, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:59:01 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746"], 0x3}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0xfcffffff}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:59:01 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, 0x0, 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0xc000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 1210.526169][T12848] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1210.557135][T12848] device bond434 entered promiscuous mode [ 1210.604011][T12848] 8021q: adding VLAN 0 to HW filter on device bond434 14:59:02 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x400000000000010, 0x0, 0x0) write(r2, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) 14:59:02 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746"], 0x3}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0xfcffffff}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:59:02 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}, 0x1, 0x4000000}, 0x0) 14:59:02 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746"], 0x3}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0xfcffffff}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:59:02 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket(0x400000000000010, 0x802, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) [ 1211.162992][T12887] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1211.292767][T12887] device bond435 entered promiscuous mode [ 1211.340994][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 1211.341013][ T26] audit: type=1804 audit(1573657142.720:1059): pid=12853 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir923645982/syzkaller.aWZZDI/831/file0" dev="sda1" ino=16705 res=1 [ 1211.374913][T12887] 8021q: adding VLAN 0 to HW filter on device bond435 14:59:02 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb"], 0x3}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0xfcffffff}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1211.611220][ T26] audit: type=1804 audit(1573657142.990:1060): pid=12869 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir400658008/syzkaller.KycbHe/1495/file0/file0" dev="sda1" ino=17533 res=1 [ 1211.680083][ T26] audit: type=1800 audit(1573657143.020:1061): pid=12869 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="file0" dev="sda1" ino=17533 res=0 [ 1211.700293][ T26] audit: type=1804 audit(1573657143.020:1062): pid=12899 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir400658008/syzkaller.KycbHe/1495/file0/file0" dev="sda1" ino=17533 res=1 14:59:03 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xf00420, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:59:03 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket(0x400000000000010, 0x802, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) 14:59:03 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}, 0x1, 0x6000000}, 0x0) 14:59:03 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x81, 0x1, 0x3f, 0x0, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x0, 0x5, 0x5}, 0x0, 0x5, r4, 0x0) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0x100011, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:59:03 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, 0x0, 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0xd000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:59:03 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb"], 0x3}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0xfcffffff}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1212.003941][T12926] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 14:59:03 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb"], 0x3}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0xfcffffff}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1212.108220][T12926] device bond436 entered promiscuous mode [ 1212.149861][T12926] 8021q: adding VLAN 0 to HW filter on device bond436 14:59:03 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket(0x400000000000010, 0x802, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) 14:59:03 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}, 0x1, 0xa000000}, 0x0) 14:59:03 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd5"], 0x3}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0xfcffffff}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:59:04 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x400000000000010, 0x802, 0x0) write(r2, 0x0, 0x0) [ 1212.658954][T12955] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1212.767567][ T26] audit: type=1804 audit(1573657144.150:1063): pid=12934 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir923645982/syzkaller.aWZZDI/832/file0" dev="sda1" ino=17550 res=1 [ 1212.827572][T12955] device bond437 entered promiscuous mode [ 1212.863411][T12955] 8021q: adding VLAN 0 to HW filter on device bond437 [ 1212.866245][ T26] audit: type=1804 audit(1573657144.230:1064): pid=12941 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir923645982/syzkaller.aWZZDI/832/file0" dev="sda1" ino=17550 res=1 14:59:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd5"], 0x3}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0xfcffffff}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1213.012315][ T26] audit: type=1800 audit(1573657144.290:1065): pid=12934 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="file0" dev="sda1" ino=17550 res=0 14:59:04 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xf0ff7f, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:59:04 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x400000000000010, 0x802, 0x0) write(r2, 0x0, 0x0) 14:59:04 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x81, 0x1, 0x3f, 0x0, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x0, 0x5, 0x5}, 0x0, 0x5, r4, 0x0) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0x100011, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:59:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}, 0x1, 0xc000000}, 0x0) 14:59:04 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, 0x0, 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0xe000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:59:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd5"], 0x3}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0xfcffffff}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1213.336477][T12988] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1213.432601][T12988] device bond438 entered promiscuous mode 14:59:04 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x400000000000010, 0x802, 0x0) write(r2, 0x0, 0x0) [ 1213.475230][T12988] 8021q: adding VLAN 0 to HW filter on device bond438 14:59:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611"], 0x3}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0xfcffffff}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:59:05 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}, 0x1, 0xe000000}, 0x0) 14:59:05 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x400000000000010, 0x802, 0x0) write(r2, &(0x7f00000000c0), 0x0) 14:59:05 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611"], 0x3}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0xfcffffff}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1213.958806][T13019] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1214.100188][T13019] device bond439 entered promiscuous mode [ 1214.146204][T13019] 8021q: adding VLAN 0 to HW filter on device bond439 [ 1214.184718][ T26] audit: type=1804 audit(1573657145.550:1066): pid=12990 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir923645982/syzkaller.aWZZDI/833/file0" dev="sda1" ino=17532 res=1 14:59:05 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611"], 0x3}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0xfcffffff}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1214.274697][ T26] audit: type=1800 audit(1573657145.550:1067): pid=12990 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="file0" dev="sda1" ino=17532 res=0 [ 1214.380178][ T26] audit: type=1804 audit(1573657145.550:1068): pid=12999 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir923645982/syzkaller.aWZZDI/833/file0" dev="sda1" ino=17532 res=1 14:59:06 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:59:06 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, 0x0, 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0xf000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:59:06 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4"], 0x3}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0xfcffffff}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:59:06 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x81, 0x1, 0x3f, 0x0, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x122, 0x3, 0x7fffffff, 0x0, 0x0, 0x5, 0x5}, 0x0, 0x5, r4, 0x0) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0x100011, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 14:59:06 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x400000000000010, 0x802, 0x0) write(r2, &(0x7f00000000c0), 0x0) 14:59:06 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}, 0x1, 0xf000000}, 0x0) 14:59:06 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x400000000000010, 0x802, 0x0) write(r2, &(0x7f00000000c0), 0x0) [ 1214.811762][T13055] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1214.844907][T13055] device bond440 entered promiscuous mode [ 1214.896562][T13055] 8021q: adding VLAN 0 to HW filter on device bond440 14:59:06 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4"], 0x3}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0xfcffffff}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) 14:59:06 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4a96e5b8b7c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}, 0x1, 0x10000000}, 0x0) 14:59:06 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x400000000000010, 0x802, 0x0) write(r2, &(0x7f00000000c0)="24000000200099f0003be90000ed190e0200", 0x12) 14:59:06 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=r3, @ANYBLOB="19756bd2000000001c0012000c000100626f6e64000000000c0002000800010006000000263b8b96423c85fd821cc766aaa3a2dc5ecbbf4c28e607a83797d4e66cc3b4811650a50e9ab6e7a24e13bb7b1c32b0e9f52746a4d2d63e8085bd0c0de7e8bb5e9e9d3530e3bcf3a4c27fb2b85a968f31779b45e1a7b573c572f6dffce7cb4e8df97c95a25ad3c3da1fdf4de8ec96960e94943bd59e82edafd4762be4531611c57d95c3a4"], 0x3}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0xfcffffff}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast=[0x0]}]}, 0x2c}}, 0x0) [ 1215.333068][T13088] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1215.472371][T13088] device bond441 entered promiscuous mode [ 1215.489149][T13065] ================================================================== [ 1215.497292][T13065] BUG: KCSAN: data-race in fsverity_file_open / integrity_inode_get [ 1215.505267][T13065] [ 1215.507620][T13065] write to 0xffff8880b5f8f634 of 4 bytes by task 13060 on cpu 0: [ 1215.515365][T13065] integrity_inode_get+0x121/0x1a0 [ 1215.520491][T13065] process_measurement+0x24d/0x1130 [ 1215.525700][T13065] ima_file_check+0x7e/0xb0 [ 1215.530208][T13065] path_openat+0xfaf/0x36e0 [ 1215.534717][T13065] do_filp_open+0x11e/0x1b0 [ 1215.534829][T13088] 8021q: adding VLAN 0 to HW filter on device bond441 [ 1215.539317][T13065] do_sys_open+0x3b3/0x4f0 [ 1215.539332][T13065] __x64_sys_open+0x55/0x70 [ 1215.539349][T13065] do_syscall_64+0xcc/0x370 [ 1215.539366][T13065] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1215.539379][T13065] [ 1215.567702][T13065] read to 0xffff8880b5f8f634 of 4 bytes by task 13065 on cpu 1: [ 1215.575340][T13065] fsverity_file_open+0x3c/0x230 [ 1215.580286][T13065] ext4_file_open+0x142/0x440 [ 1215.584962][T13065] do_dentry_open+0x301/0x970 [ 1215.589645][T13065] vfs_open+0x62/0x80 [ 1215.593628][T13065] path_openat+0xf73/0x36e0 [ 1215.598136][T13065] do_filp_open+0x11e/0x1b0 [ 1215.602638][T13065] do_sys_open+0x3b3/0x4f0 [ 1215.607065][T13065] __x64_sys_creat+0x45/0x60 [ 1215.611666][T13065] do_syscall_64+0xcc/0x370 [ 1215.616176][T13065] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1215.622059][T13065] [ 1215.624404][T13065] Reported by Kernel Concurrency Sanitizer on: [ 1215.630563][T13065] CPU: 1 PID: 13065 Comm: syz-executor.2 Not tainted 5.4.0-rc7+ #0 [ 1215.638463][T13065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1215.648691][T13065] ================================================================== [ 1215.656753][T13065] Kernel panic - not syncing: panic_on_warn set ... [ 1215.663341][T13065] CPU: 1 PID: 13065 Comm: syz-executor.2 Not tainted 5.4.0-rc7+ #0 [ 1215.671233][T13065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1215.681291][T13065] Call Trace: [ 1215.684592][T13065] dump_stack+0x11d/0x181 [ 1215.688937][T13065] panic+0x210/0x640 [ 1215.692875][T13065] ? vprintk_func+0x8d/0x140 [ 1215.697480][T13065] kcsan_report.cold+0xc/0x1a [ 1215.702178][T13065] kcsan_setup_watchpoint+0x3fe/0x460 [ 1215.707565][T13065] __tsan_read4+0xc6/0x100 [ 1215.711994][T13065] fsverity_file_open+0x3c/0x230 [ 1215.716959][T13065] ext4_file_open+0x142/0x440 [ 1215.721662][T13065] ? security_file_open+0x84/0x210 [ 1215.726788][T13065] do_dentry_open+0x301/0x970 [ 1215.731476][T13065] ? ext4_write_checks+0x180/0x180 [ 1215.736608][T13065] vfs_open+0x62/0x80 [ 1215.740592][T13065] path_openat+0xf73/0x36e0 [ 1215.745139][T13065] ? prune_tree_chunks+0x600/0x6a0 [ 1215.750370][T13065] do_filp_open+0x11e/0x1b0 [ 1215.754890][T13065] ? _raw_spin_unlock+0x4b/0x60 [ 1215.759755][T13065] ? __alloc_fd+0x2ef/0x3b0 [ 1215.764272][T13065] ? get_unused_fd_flags+0x93/0xc0 [ 1215.769387][T13065] do_sys_open+0x3b3/0x4f0 [ 1215.773819][T13065] __x64_sys_creat+0x45/0x60 [ 1215.778419][T13065] do_syscall_64+0xcc/0x370 [ 1215.782941][T13065] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1215.788839][T13065] RIP: 0033:0x45a219 [ 1215.792743][T13065] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1215.812700][T13065] RSP: 002b:00007fe09e2f0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 1215.821116][T13065] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 000000000045a219 [ 1215.829088][T13065] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000100 [ 1215.837066][T13065] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1215.845044][T13065] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe09e2f16d4 [ 1215.853020][T13065] R13: 00000000004c0abd R14: 00000000004d3520 R15: 00000000ffffffff [ 1215.862300][T13065] Kernel Offset: disabled [ 1215.866624][T13065] Rebooting in 86400 seconds..